# masquerade with sets
tcp dport { 1,2,3,4,5,6,7,8,101,202,303,1001,2002,3003} masquerade;ok
ip daddr 10.0.0.0-10.2.3.4 udp dport 53 counter masquerade;ok
-iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } masquerade;ok
+iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } masquerade;ok
[ counter pkts 0 bytes 0 ]
[ masq ]
-# iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } masquerade
+# iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } masquerade
__map%d test-ip4 b
__map%d test-ip4 0
element 00001600 : 0 [end] element 0000de00 : 0 [end]
# redirect with sets
tcp dport { 1, 2, 3, 4, 5, 6, 7, 8, 101, 202, 303, 1001, 2002, 3003} redirect;ok
ip daddr 10.0.0.0-10.2.3.4 udp dport 53 counter redirect;ok
-iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } redirect;ok
+iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } redirect;ok
# redirect with maps
-ip protocol 6 redirect to : tcp dport map { 22 : 8000, 80 : 8080};ok
+ip protocol 6 redirect to :tcp dport map { 22 : 8000, 80 : 8080};ok
[ counter pkts 0 bytes 0 ]
[ redir ]
-# iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } redirect
+# iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } redirect
__map%d test-ip4 b
__map%d test-ip4 0
element 00001600 : 0 [end] element 0000de00 : 0 [end]
[ lookup reg 1 set __map%d dreg 0 ]
[ redir ]
-# ip protocol 6 redirect to : tcp dport map { 22 : 8000, 80 : 8080}
+# ip protocol 6 redirect to :tcp dport map { 22 : 8000, 80 : 8080}
__map%d test-ip4 b
__map%d test-ip4 0
element 00001600 : 0000401f 0 [end] element 00005000 : 0000901f 0 [end]
# masquerade with sets
tcp dport { 1,2,3,4,5,6,7,8,101,202,303,1001,2002,3003} masquerade;ok
ip6 daddr fe00::1-fe00::200 udp dport 53 counter masquerade;ok
-iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } masquerade;ok
+iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } masquerade;ok
# redirect with sets
tcp dport { 1, 2, 3, 4, 5, 6, 7, 8, 101, 202, 303, 1001, 2002, 3003} redirect;ok
ip6 daddr fe00::1-fe00::200 udp dport 53 counter redirect;ok
-iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } redirect;ok
+iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } redirect;ok
# redirect with maps
-ip6 nexthdr 6 redirect to : tcp dport map { 22 : 8000, 80 : 8080};ok
+ip6 nexthdr 6 redirect to :tcp dport map { 22 : 8000, 80 : 8080};ok
[ counter pkts 0 bytes 0 ]
[ redir ]
-# iifname eth0 ct state new,established tcp dport vmap {22 : drop, 222 : drop } redirect
+# iifname "eth0" ct state established,new tcp dport vmap {22 : drop, 222 : drop } redirect
__map%d test-ip6 b
__map%d test-ip6 0
element 00001600 : 0 [end] element 0000de00 : 0 [end]
[ lookup reg 1 set __map%d dreg 0 ]
[ redir ]
-# ip6 nexthdr 6 redirect to : tcp dport map { 22 : 8000, 80 : 8080}
+# ip6 nexthdr 6 redirect to :tcp dport map { 22 : 8000, 80 : 8080}
__map%d test-ip6 b
__map%d test-ip6 0
element 00001600 : 0000401f 0 [end] element 00005000 : 0000901f 0 [end]