Blame extensions/libebt_ip.txlate
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-src ! 192.168.0.0/24 -j ACCEPT
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD ip saddr != 192.168.0.0/24 counter accept
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -I FORWARD -p ip --ip-dst 10.0.0.1
|
|
Packit |
7b22a4 |
nft insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -I OUTPUT 3 -p ip -o eth0 --ip-tos 0xff
|
|
Packit |
7b22a4 |
nft insert rule bridge filter OUTPUT oifname "eth0" ip dscp 0x3f counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-proto tcp --ip-dport 22
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD tcp dport 22 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-proto udp --ip-sport 1024:65535
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD udp sport 1024-65535 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-proto 253
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD ip protocol 253 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-protocol icmp --ip-icmp-type "echo-request"
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD icmp type 8 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-proto icmp --ip-icmp-type 1/1
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD icmp type 1 icmp code 1 counter
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
ebtables-translate -A FORWARD -p ip --ip-protocol icmp --ip-icmp-type ! 1:10
|
|
Packit |
7b22a4 |
nft add rule bridge filter FORWARD icmp type != 1-10 counter
|