[PATCH 2/2] extensions: libip6t_mh: Add translation to nft

2016-02-21 Thread Shivani Bhardwaj
Add translation for mobility header to nftables. Examples: $ sudo ip6tables-translate -A INPUT -p mh --mh-type 1 -j ACCEPT nft add rule ip6 filter INPUT meta l4proto mobility-header mh type 1 counter accept $ sudo ip6tables-translate -A INPUT -p mh --mh-type 1:3 -j ACCEPT nft add rule ip6 filte

[PATCH 1/2] iptables: nft-ipv6: Use meta l4proto instead of nexthdr

2016-02-21 Thread Shivani Bhardwaj
Use meta l4proto in place of nexthdr for ipv6 protocols as it is not necessary that all protocols be next header. Signed-off-by: Shivani Bhardwaj --- iptables/nft-ipv6.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/iptables/nft-ipv6.c b/iptables/nft-ipv6.c index 0ee7957..b