ipsec matching in postrouting nat

ipsec matching in postrouting nat

[Marek Greško]

Hello,

I would like to write rule similar to:

iptables -t nat -A POSTROUTING -o ppp0 -m policy --dir out --pol ipsec -j RETURN

in nftables. But I am not successful.

I tried:

                oifname "ppp0" meta secpath exists return

with no luck.

Is there some equvalent of the iptables command?

Thanks

Marek

Re: ipsec matching in postrouting nat

[Florian Westphal]

Marek Gre¨ko <mgresko8@gmail.com> wrote:
> Hello,
> 
> I would like to write rule similar to:
> 
> iptables -t nat -A POSTROUTING -o ppp0 -m policy --dir out --pol ipsec -j RETURN
> 
> in nftables. But I am not successful.
> 
> I tried:
> 
>                 oifname "ppp0" meta secpath exists return
> 
> with no luck.
> 
> Is there some equvalent of the iptables command?

Try replacing 'meta secpath' with 'rt ipsec'