Blame extensions/libxt_ecn.txlate

Packit 7b22a4
iptables-translate -A INPUT -m ecn --ecn-ip-ect 0
Packit 7b22a4
nft add rule ip filter INPUT ip ecn not-ect counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn --ecn-ip-ect 1
Packit 7b22a4
nft add rule ip filter INPUT ip ecn ect1 counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn --ecn-ip-ect 2
Packit 7b22a4
nft add rule ip filter INPUT ip ecn ect0 counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn --ecn-ip-ect 3
Packit 7b22a4
nft add rule ip filter INPUT ip ecn ce counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 0
Packit 7b22a4
nft add rule ip filter INPUT ip ecn != not-ect counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 1
Packit 7b22a4
nft add rule ip filter INPUT ip ecn != ect1 counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 2
Packit 7b22a4
nft add rule ip filter INPUT ip ecn != ect0 counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 3
Packit 7b22a4
nft add rule ip filter INPUT ip ecn != ce counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn ! --ecn-tcp-ece
Packit 7b22a4
nft add rule ip filter INPUT tcp flags != ecn counter
Packit 7b22a4
Packit 7b22a4
iptables-translate -A INPUT -m ecn --ecn-tcp-cwr
Packit 7b22a4
nft add rule ip filter INPUT tcp flags cwr counter