extensions: libxt_helper: Add translation to nft
PATCH v2 1/1 extensions: libxt_helper: Add translation to nft
Add translation for helper module to nftables.
Examples:
$ sudo iptables-translate -A FORWARD -m helper --helper sip nft add rule ip filter FORWARD ct helper \"sip\" counter
$ sudo iptables-translate -A FORWARD -m helper ! --helper ftp nft add rule ip filter FORWARD ct helper != \"ftp\" counter
Signed-off-by Shivani Bhardwaj <[email protected]>
--- extensions/libxt_helper.c | 12 ++++++++++++ 1 file changed, 12 insertions(+)
extensions/libxt_helper.c +12 -0
@@ -45,6 +45,17 @@ static void helper_save(const void *ip, const struct xt_entry_match *match)xtables_save_string (info->name); } +static int helper_xlate (const struct xt_entry_match *match, +struct xt_buf *buf,int numeric) +{ +const struct xt_helper_info *info = (const void *)match->data; + +xt_buf_add (buf,"ct helper%s \\\"%s\\\" " , + info->invert ?" !=" :"" , info->name); + +return 1 ; +} +static struct xtables_match helper_match = { .family =NFPROTO_UNSPEC , .name ="helper" ,
@@ -55,6 +66,7 @@ static struct xtables_match helper_match = { .save = helper_save, .x6_parse = helper_parse, .x6_options = helper_opts, + .xlate = helper_xlate, };void _init (void )
Signature · 1 line
1.9.1
Quoted 9 lines · Shivani Bhardwaj
Add translation for helper module to nftables.
Examples:
$ sudo iptables-translate -A FORWARD -m helper --helper sip nft add rule ip filter FORWARD ct helper \"sip\" counter$ sudo iptables-translate -A FORWARD -m helper ! --helper ftp nft add rule ip filter FORWARD ct helper != \"ftp\" counter
Applied, thanks.