search for: iiftype

...^^ * Fix assertion when using non-equal comparison, eg. nft add rule filter input ip protocol != icmp counter ^^ * Range inversions, eg. nft add rule filter input != 192.168.0.1-192.168.0.10 ^^ * Fix 'meta iiftype ether'. * Fix the udplite selector, due to missing code in the tokenizer. Ongoing works ============= There are several open fronts in terms of development: * Full logging support for all the supported families (ip, ip6, arp, bridge and inet). * Masquerading support. * Better reject sup...

https://bugzilla.netfilter.org/show_bug.cgi?id=1226 Bug ID: 1226 Summary: Segmentation fault when printing a rule checking byte zero of NFT_PAYLOAD_LL_HEADER Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5

...dr, all protocol related types *_proto and the network interface related type iface_*. The arphrd type has been renamed to iface_type. * Unqualified meta expressions A number of keys of the meta expressions can be used without the meta keyword for simplicity. These are mark, iif, iifname, iiftype, oif, oifname, oiftype, skuid, skgid, nftrace and rtclassid. The meta keyword may still be used if desired. - nft filter output meta skuid root accept becomes - nft filter output skuid root accept New features ============ The more prominent new features include: * Support for hybr...

...offset from resolve_protocol_conflict() evaluate: only try to replace dummy protocol from link-layer context evaluate: assert on invalid base in resolve_protocol_conflict() evaluate: wrap protocol context debunk into function evaluate: generate ether type payload after meta iiftype proto: proto_dev_type() returns interface type for base protocols too src: annotate follow up dependency just after killing another tests/py: test vlan on ingress netlink_delinearize: prune implicit binop before payload_match_postprocess() proto: use parameter-problem...