| Pablo M. Bermudo Garay | 340105f | 2017-03-31 14:34:38 +0200 | [diff] [blame] | 1 | iptables-translate -A INPUT -m addrtype --src-type LOCAL |
| 2 | nft add rule ip filter INPUT fib saddr type local counter |
| 3 | |
| 4 | iptables-translate -A INPUT -m addrtype --dst-type LOCAL |
| 5 | nft add rule ip filter INPUT fib daddr type local counter |
| 6 | |
| 7 | iptables-translate -A INPUT -m addrtype ! --dst-type ANYCAST,LOCAL |
| 8 | nft add rule ip filter INPUT fib daddr type != { local, anycast } counter |
| 9 | |
| 10 | iptables-translate -A INPUT -m addrtype --limit-iface-in --dst-type ANYCAST,LOCAL |
| 11 | nft add rule ip filter INPUT fib daddr . iif type { local, anycast } counter |