On Tuesday 2016-10-11 20:11, Bjørnar Ness wrote: >Hello, netfilter-devel. > >Is it possible/planned to be able to do routing table lookup from >within nftables? >Thinking then of a routingtable like "set". This would be nice to be able to do >early drop on bgp populated saddr based rtbl.
Well you can mark routes with realm numbers, and match on that. (In iptables, this was done with -m realm.) At least that is the idea. Not sure if the skb field that holds the information is already filled in before FORWARD (at which point I guess it will contain the dst realm anyway). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
