From: Liping Zhang
Imagine such situation, user add the following nft rules, and queue
the packets to userspace for further check:
# ip rule add fwmark 0x0/0x1 lookup eth0
# ip rule add fwmark 0x1/0x1 lookup eth1
# nft add table filter
# nft add chain filter output {type route hook output
On Tue, Sep 06, 2016 at 10:31:02PM +0800, Liping Zhang wrote:
[...]
> This is consistent with the mangle table in iptables.
Right, thanks for getting this code in sync with the ip{6}table_mangle
codebase.
So I'm applying this.
--
To unsubscribe from this list: send the line "unsubscribe netfilter