From: Shivani Bhardwaj <shivanib134@gmail.com>
To: netfilter-devel@vger.kernel.org
Subject: [PATCH] extensions: libip6t_hl: Add translation to nft
Date: Thu, 7 Jan 2016 15:09:24 +0530 [thread overview]
Message-ID: <20160107093924.GA6686@gmail.com> (raw)
Add translation for hop limit to nftables.
Examples:
$ sudo ip6tables-translate -t nat -A postrouting -m hl --hl-gt 3
nft add rule ip6 nat postrouting ip6 hoplimit gt 3 counter
$ sudo ip6tables-translate -t nat -A postrouting -m hl ! --hl-eq 3
nft add rule ip6 nat postrouting ip6 hoplimit != 3 counter
Signed-off-by: Shivani Bhardwaj <shivanib134@gmail.com>
---
extensions/libip6t_hl.c | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
diff --git a/extensions/libip6t_hl.c b/extensions/libip6t_hl.c
index 3559db4..0e13df1 100644
--- a/extensions/libip6t_hl.c
+++ b/extensions/libip6t_hl.c
@@ -97,6 +97,23 @@ static const struct xt_option_entry hl_opts[] = {
};
#undef s
+static int hl_xlate(const struct xt_entry_match *match,
+ struct xt_buf *buf, int numeric)
+{
+ static const char *const op[] = {
+ [IP6T_HL_EQ] = "ip6 hoplimit",
+ [IP6T_HL_NE] = "ip6 hoplimit !=",
+ [IP6T_HL_LT] = "ip6 hoplimit lt",
+ [IP6T_HL_GT] = "ip6 hoplimit gt" };
+
+ const struct ip6t_hl_info *info =
+ (struct ip6t_hl_info *) match->data;
+
+ xt_buf_add(buf, "%s %u ", op[info->mode], info->hop_limit);
+
+ return 1;
+}
+
static struct xtables_match hl_mt6_reg = {
.name = "hl",
.version = XTABLES_VERSION,
@@ -109,6 +126,7 @@ static struct xtables_match hl_mt6_reg = {
.x6_parse = hl_parse,
.x6_fcheck = hl_check,
.x6_options = hl_opts,
+ .xlate = hl_xlate,
};
--
1.9.1
next reply other threads:[~2016-01-07 9:39 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-01-07 9:39 Shivani Bhardwaj [this message]
2016-01-11 18:59 ` [PATCH] extensions: libip6t_hl: Add translation to nft Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160107093924.GA6686@gmail.com \
--to=shivanib134@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.