Arturo Borrero Gonzalez <arturo.borrero.g...@gmail.com> wrote: > Unlike in iptables, in nftables we don't know the expected l4 protocol > at rule setup time. > > In the iptables<->nftables compat layer, we have an expression > attribute which is filled from userspace with the l4 protocol > (NFTA_RULE_COMPAT_PROTO). > > Not sure if it's worth adding a new netlink attribute for nft_nat to > tell the expression about the expected l4 NAT protocol.
Right, it might more sense to handle this in nft frontend instead. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
