hmz007
36ed224bac
Signed-off-by: hmz007 <hmz007@gmail.com> Change-Id: Ib87fdbe7a0be7dc961af3500fe9ea4589a127f9f
15 lines
832 B
Plaintext
15 lines
832 B
Plaintext
iptables-translate -A OUTPUT -m connbytes --connbytes 200 --connbytes-dir original --connbytes-mode packets
|
|
nft add rule ip filter OUTPUT ct original packets ge 200 counter
|
|
|
|
iptables-translate -A OUTPUT -m connbytes ! --connbytes 200 --connbytes-dir reply --connbytes-mode packets
|
|
nft add rule ip filter OUTPUT ct reply packets lt 200 counter
|
|
|
|
iptables-translate -A OUTPUT -m connbytes --connbytes 200:600 --connbytes-dir both --connbytes-mode bytes
|
|
nft add rule ip filter OUTPUT ct bytes 200-600 counter
|
|
|
|
iptables-translate -A OUTPUT -m connbytes ! --connbytes 200:600 --connbytes-dir both --connbytes-mode bytes
|
|
nft add rule ip filter OUTPUT ct bytes != 200-600 counter
|
|
|
|
iptables-translate -A OUTPUT -m connbytes --connbytes 200:200 --connbytes-dir both --connbytes-mode avgpkt
|
|
nft add rule ip filter OUTPUT ct avgpkt 200 counter
|