http://wiki.nftables.org/wiki-nftables/api.php?action=feedcontributions&feedformat=atom&user=Robgcnftables wiki - User contributions [en]2026-05-26T23:23:29ZUser contributionsMediaWiki 1.43.6http://wiki.nftables.org/wiki-nftables/index.php?title=List_of_available_translations_via_iptables-translate_tool&diff=60List of available translations via iptables-translate tool2016-09-21T19:48:46Z<p>Robgc: /* xt */</p>
<hr />
<div>The following '''matches and targets''' (in alphabetic order) can be fully translated via iptables-translate tool:<br />
== Translatable extensions ==<br />
=== Matches === <br />
====xt====<br />
<br />
* comment<br />
* connmark<br />
* cpu<br />
* devgroup<br />
* dscp<br />
* esp<br />
* helper<br />
* iprange<br />
* length<br />
* limit<br />
* mac<br />
* mark<br />
* pkttype<br />
* state<br />
* tcp<br />
* udp<br />
<br />
====ip====<br />
<br />
* ah<br />
* realm<br />
* ttl<br />
<br />
====ip6====<br />
<br />
* ah<br />
* frag<br />
* hbh<br />
* hl<br />
* mh<br />
<br />
=== Targets ===<br />
<br />
====xt====<br />
* NFLOG<br />
* NFQUEUE<br />
* TEE<br />
* TRACE<br />
<br />
====ip====<br />
<br />
* DNAT<br />
* MASQUERADE<br />
* REDIRECT<br />
* REJECT<br />
* SNAT<br />
<br />
====ip6====<br />
<br />
* DNAT<br />
* MASQUERADE<br />
* REDIRECT<br />
* REJECT<br />
* SNAT<br />
<br />
<br />
<br />
Following '''matches''' and '''targets''' are yet to be translated:<br />
<br />
== Untranslatable extensions ==<br />
<br />
=== Matches ===<br />
<br />
====xt====<br />
* cgroup<br />
[Waiting for support of cgroup2 path-based in nft]<br />
* connlabel<br />
[Waiting for support of --set]<br />
<br />
Patch sent: https://patchwork.ozlabs.org/patch/592462/ (Needs revisit)<br />
* dccp<br />
[Waiting for support of --dccp-option] (partial translations available)<br />
* ecn<br />
[Waiting for support of --ecn-tcp-ece and --ecn-tcp-cwr] (partial translations available)<br />
* ipcomp<br />
[Waiting for support of --compres] (partial translations available)<br />
* multiport<br />
[Waiting for support of --ports] (partial translations available)<br />
* owner<br />
[Waiting for support of --socket-exists] (partial translations available)<br />
* sctp<br />
[Waiting for support of --chunk-types] (partial translations available)<br />
* set<br />
[Waiting for support]<br />
: Suggestions for adding support:<br />
:* Add counters to each element of a set. A counter contains the number of packets that matched an element and the total number of bytes. There must be the option of enabling or disabling the update of counters' values at will. Also counters' values must be accesible in order to do comparisons.<br />
:* Sets must include different types of elements. Sets must have support for the "nomatch" flag.<br />
[[User:Robgc|Robgc]] ([[User talk:Robgc|talk]]) 21:48, 21 September 2016 (CEST)<br />
<br />
====ip====<br />
*icmp<br />
[Waiting for support of packet types]<br />
<br />
====ip6====<br />
*icmp6<br />
[Waiting for support of packet types]<br />
* ipv6header<br />
* rt<br />
[Waiting for support of --rt-0-res, --rt-0-addrs, --rt-0-not-strict] (partial translations available)<br />
<br />
=== Targets ===<br />
====xt====<br />
* CLASSIFY<br />
[Requires bug fixing]<br />
* MARK<br />
[--set-mark and --set-xmark options are not fully supported] (partial translations available)<br/><br />
If --set-mark is used you must only specify the mark.<br/><br />
If --set-xmark is used you must specify the mark and the mask.<br />
* CONNMARK<br />
[Waiting for support of --save-mark, --restore-mark, --set-mark and --set-xmark] (partial translations available)<br/><br />
If --set-mark is used you must only specify the mark.<br/><br />
If --set-xmark is used you must specify the mark and the mask.<br />
<br />
====ip====<br />
* LOG<br />
[Waiting for support of log-tcp-sequence, log-tcp-options, log-ip-options, log-uid, log-macdecode] (partial translations available)<br />
====ip6====<br />
* LOG<br />
[Waiting for support of log-tcp-sequence, log-tcp-options, log-ip-options, log-uid, log-macdecode] (partial translations available)</div>Robgchttp://wiki.nftables.org/wiki-nftables/index.php?title=List_of_available_translations_via_iptables-translate_tool&diff=59List of available translations via iptables-translate tool2016-09-21T19:48:16Z<p>Robgc: /* xt */</p>
<hr />
<div>The following '''matches and targets''' (in alphabetic order) can be fully translated via iptables-translate tool:<br />
== Translatable extensions ==<br />
=== Matches === <br />
====xt====<br />
<br />
* comment<br />
* connmark<br />
* cpu<br />
* devgroup<br />
* dscp<br />
* esp<br />
* helper<br />
* iprange<br />
* length<br />
* limit<br />
* mac<br />
* mark<br />
* pkttype<br />
* state<br />
* tcp<br />
* udp<br />
<br />
====ip====<br />
<br />
* ah<br />
* realm<br />
* ttl<br />
<br />
====ip6====<br />
<br />
* ah<br />
* frag<br />
* hbh<br />
* hl<br />
* mh<br />
<br />
=== Targets ===<br />
<br />
====xt====<br />
* NFLOG<br />
* NFQUEUE<br />
* TEE<br />
* TRACE<br />
<br />
====ip====<br />
<br />
* DNAT<br />
* MASQUERADE<br />
* REDIRECT<br />
* REJECT<br />
* SNAT<br />
<br />
====ip6====<br />
<br />
* DNAT<br />
* MASQUERADE<br />
* REDIRECT<br />
* REJECT<br />
* SNAT<br />
<br />
<br />
<br />
Following '''matches''' and '''targets''' are yet to be translated:<br />
<br />
== Untranslatable extensions ==<br />
<br />
=== Matches ===<br />
<br />
====xt====<br />
* cgroup<br />
[Waiting for support of cgroup2 path-based in nft]<br />
* connlabel<br />
[Waiting for support of --set]<br />
<br />
Patch sent: https://patchwork.ozlabs.org/patch/592462/ (Needs revisit)<br />
* dccp<br />
[Waiting for support of --dccp-option] (partial translations available)<br />
* ecn<br />
[Waiting for support of --ecn-tcp-ece and --ecn-tcp-cwr] (partial translations available)<br />
* ipcomp<br />
[Waiting for support of --compres] (partial translations available)<br />
* multiport<br />
[Waiting for support of --ports] (partial translations available)<br />
* owner<br />
[Waiting for support of --socket-exists] (partial translations available)<br />
* sctp<br />
[Waiting for support of --chunk-types] (partial translations available)<br />
* set<br />
[Waiting for support]<br />
: Suggestions for adding support:<br />
:* Add counters to each element of a set. A counter contains the number of packets that matched an element and the total number of bytes. There must be the option of enabling or disabling the update of counters' values at will. Also counters' values must be accesible in order to do comparisons.<br />
:* Sets must include different types of elements. Sets must have support for the "nomatch" flag<br />
[[User:Robgc|Robgc]] ([[User talk:Robgc|talk]]) 21:48, 21 September 2016 (CEST)<br />
<br />
====ip====<br />
*icmp<br />
[Waiting for support of packet types]<br />
<br />
====ip6====<br />
*icmp6<br />
[Waiting for support of packet types]<br />
* ipv6header<br />
* rt<br />
[Waiting for support of --rt-0-res, --rt-0-addrs, --rt-0-not-strict] (partial translations available)<br />
<br />
=== Targets ===<br />
====xt====<br />
* CLASSIFY<br />
[Requires bug fixing]<br />
* MARK<br />
[--set-mark and --set-xmark options are not fully supported] (partial translations available)<br/><br />
If --set-mark is used you must only specify the mark.<br/><br />
If --set-xmark is used you must specify the mark and the mask.<br />
* CONNMARK<br />
[Waiting for support of --save-mark, --restore-mark, --set-mark and --set-xmark] (partial translations available)<br/><br />
If --set-mark is used you must only specify the mark.<br/><br />
If --set-xmark is used you must specify the mark and the mask.<br />
<br />
====ip====<br />
* LOG<br />
[Waiting for support of log-tcp-sequence, log-tcp-options, log-ip-options, log-uid, log-macdecode] (partial translations available)<br />
====ip6====<br />
* LOG<br />
[Waiting for support of log-tcp-sequence, log-tcp-options, log-ip-options, log-uid, log-macdecode] (partial translations available)</div>Robgc