]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: libxt_dscp: Add translation to nft
authorLaura Garcia Liebana <nevola@gmail.com>
Mon, 6 Jun 2016 18:51:04 +0000 (20:51 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 6 Jun 2016 22:40:04 +0000 (00:40 +0200)
commitcd11b62b477dc4563892d167ca58abfc637cdb1f
tree50334c0e50cdf3f4b2a2a4350f62d1dec69210c6
parent8dbc8b37bd6f44841dab72df43b09c082b01f462
extensions: libxt_dscp: Add translation to nft

Add translation for dscp to nftables, for both ipv4 and ipv6.

Examples:

$ sudo iptables-translate -t filter -A INPUT -m dscp --dscp 0x32 -j ACCEPT
nft add rule ip filter INPUT ip dscp 0x32 counter accept

$ sudo ip6tables-translate -t filter -A INPUT -m dscp ! --dscp 0x32 -j ACCEPT
nft add rule ip6 filter INPUT ip6 dscp != 0x32 counter accept

Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
extensions/libxt_dscp.c