* using iptables matches and targets with nft
@ 2015-12-10 12:16 Stefan Berghofer
2015-12-10 12:45 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Stefan Berghofer @ 2015-12-10 12:16 UTC (permalink / raw)
To: netfilter
Hi all,
recent versions of the Linux kernel and the libnftnl library define nft expression types
with the names "match" and "target". However, I could not find any reference to these
expression types in the code of the nft user space utility, but only in the code for iptables.
Is it possible to access iptables matches and targets from rules defined with nft, or is
this not intended?
Greetings,
Stefan
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: using iptables matches and targets with nft
2015-12-10 12:16 using iptables matches and targets with nft Stefan Berghofer
@ 2015-12-10 12:45 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2015-12-10 12:45 UTC (permalink / raw)
To: Stefan Berghofer; +Cc: netfilter
On Thu, Dec 10, 2015 at 01:16:18PM +0100, Stefan Berghofer wrote:
> Hi all,
>
> recent versions of the Linux kernel and the libnftnl library define nft expression types
> with the names "match" and "target". However, I could not find any reference to these
> expression types in the code of the nft user space utility, but only in the code for iptables.
> Is it possible to access iptables matches and targets from rules defined with nft, or is
> this not intended?
iptables-compat uses this, this will be included in iptables 1.6.0
(just resolved a problem with static compilation, so we can release
this asap).
There is also a patch for nft (not in master yet) that takes what was
added via iptables-compat and provides a translation to the native
extensions (Shivani is working on the translation part at this
moment).
The idea is to provide an easy way to migrate from your iptables
ruleset to nft.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-12-10 12:45 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-12-10 12:16 using iptables matches and targets with nft Stefan Berghofer
2015-12-10 12:45 ` Pablo Neira Ayuso
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.