* Question regarding iptables-nftables compatibility layer with libiptc
@ 2014-12-15 14:33 Tomer Eliyahu
2014-12-15 15:01 ` Pablo Neira Ayuso
0 siblings, 1 reply; 3+ messages in thread
From: Tomer Eliyahu @ 2014-12-15 14:33 UTC (permalink / raw)
To: netfilter-devel
Hi,
Regarding applications which use libiptc directly, such as openwrt's
firewall package - does the iptables-nftables compatibility layer
support translating libiptc calls to nftables calls?
If not - is there any plan to add such support or should every such
application be upgraded for nftables support?
Best Regards,
Tomer
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Question regarding iptables-nftables compatibility layer with libiptc
2014-12-15 14:33 Question regarding iptables-nftables compatibility layer with libiptc Tomer Eliyahu
@ 2014-12-15 15:01 ` Pablo Neira Ayuso
2014-12-15 19:24 ` Tomer Eliyahu
0 siblings, 1 reply; 3+ messages in thread
From: Pablo Neira Ayuso @ 2014-12-15 15:01 UTC (permalink / raw)
To: Tomer Eliyahu; +Cc: netfilter-devel
On Mon, Dec 15, 2014 at 04:33:59PM +0200, Tomer Eliyahu wrote:
> Hi,
>
> Regarding applications which use libiptc directly, such as openwrt's
> firewall package - does the iptables-nftables compatibility layer
> support translating libiptc calls to nftables calls?
No.
> If not - is there any plan to add such support or should every such
> application be upgraded for nftables support?
No plans to support that. Unfortunately that library was not ever
intended to be a public library:
http://www.netfilter.org/documentation/FAQ/netfilter-faq-4.html#ss4.5
The official public interface so far is iptables-restore.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Question regarding iptables-nftables compatibility layer with libiptc
2014-12-15 15:01 ` Pablo Neira Ayuso
@ 2014-12-15 19:24 ` Tomer Eliyahu
0 siblings, 0 replies; 3+ messages in thread
From: Tomer Eliyahu @ 2014-12-15 19:24 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
Thanks, should have read the FAQ before asking...
Is there a clean way to notify a kernel module whenever an iptables
rule changes (e.g. without nftables / in kernels <3.13) ?
Best Regards,
Tomer
On Mon, Dec 15, 2014 at 5:01 PM, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> On Mon, Dec 15, 2014 at 04:33:59PM +0200, Tomer Eliyahu wrote:
>> Hi,
>>
>> Regarding applications which use libiptc directly, such as openwrt's
>> firewall package - does the iptables-nftables compatibility layer
>> support translating libiptc calls to nftables calls?
>
> No.
>
>> If not - is there any plan to add such support or should every such
>> application be upgraded for nftables support?
>
> No plans to support that. Unfortunately that library was not ever
> intended to be a public library:
>
> http://www.netfilter.org/documentation/FAQ/netfilter-faq-4.html#ss4.5
>
> The official public interface so far is iptables-restore.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-12-15 19:24 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-12-15 14:33 Question regarding iptables-nftables compatibility layer with libiptc Tomer Eliyahu
2014-12-15 15:01 ` Pablo Neira Ayuso
2014-12-15 19:24 ` Tomer Eliyahu
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).