[Bug 1130] Better handling of DNS names in nft ruleset

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Mar 14 16:25:34 CET 2017


https://bugzilla.netfilter.org/show_bug.cgi?id=1130

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
If you're seeking to improve human readability, then I'd suggest you use
variable definitions, eg.

define yahoo = { 98.139.183.24, 98.138.253.109, 206.190.36.45 }

add table x
add chain x y { type filter hook output priority 0; }
add rule x y ip daddr $yahoo drop

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170314/8c14fc98/attachment.html>


More information about the netfilter-buglog mailing list