It will be mostly implemented with ucode templates installed at /usr/share/ss-rules and called from init script. The generated nftables rules will be stored at /etc/nftables.d/ Incompatible changes were introduced as described in the README.md file - Netfilter ipset was replaced with nftables sets - UCI options ipt_args and dst_forward_recentrst of section ss_rules are now deprecated. The former does not apply to nftables. The later not yet implemented with nftables. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
8 lines
102 B
Ucode
8 lines
102 B
Ucode
{%
|
|
|
|
include("set.uc");
|
|
include("chain.uc", {proto: "tcp"});
|
|
include("chain.uc", {proto: "udp"});
|
|
|
|
%}
|
|
|