netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* nft: bitoperations between ct and nf mark
@ 2015-07-03  9:23 Andreas Schultz
  0 siblings, 0 replies; only message in thread
From: Andreas Schultz @ 2015-07-03  9:23 UTC (permalink / raw)
  To: netfilter

Hi,

With iptables CONNMARK, one could something like:

 ... -j CONNMARK --restore-mark --nfmask 0xAA --ctmask 0x0F

There seems to be no way to replicate this with nftables meta ct
and mark.

Attemting so use something like:

meta mark set (meta & 0xffffff55) | (ct mark & 0xfffffff0)

results in:

> Error: Right hand side of binary operation (&) must be constant

How i can replicate the restore mark with masks behavior in nft?

Regards
Andreas

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2015-07-03  9:23 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-07-03  9:23 nft: bitoperations between ct and nf mark Andreas Schultz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).