Re: [PATCH v2] extensions: libxt_owner: Add translation to nft

2016-03-03 Thread Pablo Neira Ayuso
On Thu, Mar 03, 2016 at 12:45:55AM +0530, Shivani Bhardwaj wrote: > Add translation for module owner to nftables. > Full translation of this match awaits the support for --socket-exists > option. > > Examples: > > $ sudo iptables-translate -t nat -A OUTPUT -p tcp --dport 80 -m owner > --uid-owne

[PATCH v2] extensions: libxt_owner: Add translation to nft

2016-03-02 Thread Shivani Bhardwaj
Add translation for module owner to nftables. Full translation of this match awaits the support for --socket-exists option. Examples: $ sudo iptables-translate -t nat -A OUTPUT -p tcp --dport 80 -m owner --uid-owner root -j ACCEPT nft add rule ip nat OUTPUT tcp dport 80 skuid 0 counter accept $