You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
15 lines
654 B
15 lines
654 B
4 months ago
|
iptables-translate -A INPUT -m connmark --mark 2 -j ACCEPT
|
||
|
|
nft add rule ip filter INPUT ct mark 0x2 counter accept
|
||
|
|
|
||
|
|
iptables-translate -A INPUT -m connmark ! --mark 2 -j ACCEPT
|
||
|
|
nft add rule ip filter INPUT ct mark != 0x2 counter accept
|
||
|
|
|
||
|
|
iptables-translate -A INPUT -m connmark --mark 10/10 -j ACCEPT
|
||
|
|
nft add rule ip filter INPUT ct mark and 0xa == 0xa counter accept
|
||
|
|
|
||
|
|
iptables-translate -A INPUT -m connmark ! --mark 10/10 -j ACCEPT
|
||
|
|
nft add rule ip filter INPUT ct mark and 0xa != 0xa counter accept
|
||
|
|
|
||
|
|
iptables-translate -t mangle -A PREROUTING -p tcp --dport 40 -m connmark --mark 0x40
|
||
|
|
nft add rule ip mangle PREROUTING tcp dport 40 ct mark 0x40 counter
|