local family=$1
local hook=$2
local prioname=$3
+ local device=${4:+device $4}
for i in -11 -10 0 10 11
do
local offset=`format_offset $i`
- $NFT add chain $family x `chainname $hook $prioname $offset` "{ type filter hook $hook priority $prioname $offset; }"
+ local chainname=`chainname $hook $prioname $offset`
+ $NFT add chain $family x $chainname "{ type filter hook $hook $device priority $prioname $offset; }"
done
}
gen_chains $family postrouting srcnat
done
-
family=arp
$NFT add table $family x
for hook in input output
gen_chains $family $hook filter
done
-
family=netdev
$NFT add table $family x
-hook=ingress
-prioname=filter
-for i in -11 -10 0 10 11
-do
- offset=`format_offset $i`
- $NFT add chain $family x `chainname $hook $prioname $offset` "{ type filter hook $hook device lo priority $prioname $offset; }"
-done
+gen_chains $family ingress filter lo
family=bridge
$NFT add table $family x
do
gen_chains $family $hook filter
done
-
gen_chains $family prerouting dstnat
gen_chains $family output out
gen_chains $family postrouting srcnat