Bridge filtering

From nftables wiki
Revision as of 19:53, 13 July 2016 by Pablo (talk | contribs) (Created page with "== Limitation == There is currently no connection tracking available for bridge filtering. == Examples == Filter on TCP destination port: <source lang="bash"> nft add rule...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Limitation

There is currently no connection tracking available for bridge filtering.

Examples

Filter on TCP destination port:

nft add rule bridge filter forward ether type ip tcp dport 22 accept

Accept arp packet:

nft add rule bridge filter forward ether type arp accept