Signed-off-by: hmz007 <hmz007@gmail.com> Change-Id: Ib87fdbe7a0be7dc961af3500fe9ea4589a127f9f
6 lines
233 B
Plaintext
6 lines
233 B
Plaintext
iptables-translate -A INPUT -m policy --pol ipsec --dir in
|
|
nft add rule ip filter INPUT meta secpath exists counter
|
|
|
|
iptables-translate -A INPUT -m policy --pol none --dir in
|
|
nft add rule ip filter INPUT meta secpath missing counter
|