* Multiple labels with connlabel
@ 2020-08-26 10:15 Amiq Nahas
2020-08-26 21:43 ` Florian Westphal
0 siblings, 1 reply; 2+ messages in thread
From: Amiq Nahas @ 2020-08-26 10:15 UTC (permalink / raw)
To: netfilter
Currently this can be done
iptables -t mangle -I PREROUTING -m connlabel --label portforward
What if someone wants to use multiple labels? One would have to write
this same rules several times.
Can we do something like this:
iptables -t mangle -I PREROUTING -m connlabel --label
portforward-something-somethingelse-...
This way multiple labels can be used with a single rule. Is this
possible to do, or is there any workaround for this?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Multiple labels with connlabel
2020-08-26 10:15 Multiple labels with connlabel Amiq Nahas
@ 2020-08-26 21:43 ` Florian Westphal
0 siblings, 0 replies; 2+ messages in thread
From: Florian Westphal @ 2020-08-26 21:43 UTC (permalink / raw)
To: Amiq Nahas; +Cc: netfilter
Amiq Nahas <m992493@gmail.com> wrote:
> Currently this can be done
> iptables -t mangle -I PREROUTING -m connlabel --label portforward
>
> What if someone wants to use multiple labels? One would have to write
> this same rules several times.
> Can we do something like this:
> iptables -t mangle -I PREROUTING -m connlabel --label
> portforward-something-somethingelse-...
No, thats not supported. You can use matches multiple times:
iptables -t mangle -I PREROUTING \
-m connlabel --label portforward \
-m connlabel --label something \
-m connlabel --label somethingelse
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-08-26 21:43 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-08-26 10:15 Multiple labels with connlabel Amiq Nahas
2020-08-26 21:43 ` Florian Westphal
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox