From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:organization:user-agent:in-reply-to :references:mime-version:content-transfer-encoding; bh=SxkR9+dCfNvxsVevtR3X+tKq1Oi3p8/vC5lmhf4lJ84=; b=WHvnaINYt+F6/v/HKMLBxUdMA2gtYxwam9WEsNvT7lMOlu9WZBohbF+26ISdoPoBBL 8KGp8P2PqCWoDKvXuL+8+qf+jhdCiGlZbhDI3ih+qg1KEvWW8/zbclNMyEKz/xrSy58P NluTWxYwdgvi0/uf79RMYB9+Xj6kJrkSP7LFP8U2L+vPIAHK9q2AEbC1KL1pKcW7Rzc6 oMdWQRPcmc34y0wgQhp/SjSkjzs7GKFcvDT3bDh9I+/41VTrNN2RBIU8s+puY9N2neLZ 6UmG8LoHcUB1knoxmkWmoVogi9/1HpC0gzv4b+iARMij7TjSXzGu5OJip4xRv6PKkeFu HI7g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:organization :user-agent:in-reply-to:references:mime-version :content-transfer-encoding; bh=SxkR9+dCfNvxsVevtR3X+tKq1Oi3p8/vC5lmhf4lJ84=; b=qk4Q4FYg63Cze93n85ygF6hr/zVqyp3K9wKMJfR3nJS9aZkTtLO/6WEeACs6cTxlBc NocbljKmcfIpYn1pI1l+vmd45FccgYCJwKTGv1HZzcmu1yuQDB/03G4u2DMMg/Wzhxni s4cPUDdtgPrZcErksUjDZVuma8CWU1mJLbyWCNE7zpJZ6Qio1oHJLx/7b6aYuhPHPBE6 Cj4LmCrfRsJ1KcxyvkwJcSGoj4KS3i106wqixeg6Ll5NFcvTaCkzxXXHDkc8l99v6yj6 juDPSreB+mqjX6IsBWipkOYxmExoPqK5EZ5HO/7j0dDLbqHLKmbFGclmPOmizXjaRpIp Vvkw== X-Gm-Message-State: AIkVDXL26FCFp0E0tDzdXXPlHch2E85Y5LLxA15GL3GHqfFv//IWDWKvVcuIaEhX8FetLA== X-Received: by 10.28.8.130 with SMTP id 124mr19348824wmi.65.1485308173182; Tue, 24 Jan 2017 17:36:13 -0800 (PST) From: "=?utf-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?=" X-Google-Original-From: =?utf-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?= To: ALT Linux sysadmins' discussion Date: Wed, 25 Jan 2017 09:36:09 +0800 Message-ID: <26064723.PXQFy3xkmf@it-0> Organization: =?UTF-8?B?0J7QntCeICLQotC10LvQtdCd0Y3RgiI=?= User-Agent: KMail/5.3.3 (Linux/4.9.5-un-def-alt1; KDE/5.28.0; x86_64; ; ) In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="UTF-8" Subject: Re: [Sysadmins] nftables rules simple example X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux sysadmins' discussion List-Id: ALT Linux sysadmins' discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jan 2017 01:36:16 -0000 Archived-At: List-Archive: 0L/QvtC90LXQtNC10LvRjNC90LjQuiwgMjMg0Y/QvdCy0LDRgNGPIDIwMTcg0LMuIDc6NTM6MjAg KzA4INC+0YIgRXVnZW5lIFByb2tvcGlldiDQv9C+0YHRgtGD0L/QuNC70L4g0YHQu9C10LTRg9GO 0YnQtdC1Ogo+INCQINC/0L7QutCw0LbQuNGC0LUsINC/0L7QttCw0LvRg9C50YHRgtCwLCDQv9GA 0LjQvNC10YAg0L/RgNCw0LLQuNC7INCy0LjQtNCwOiDQt9Cw0L/RgNC10YLQuNGC0Ywg0LLRgdC1 LCDRgNCw0LfRgNC10YjQuNGC0YwKPiDRgtC+0LvRjNC60L4gc3NoINC40Lcg0L3QtdC60L7RgtC+ 0YDRi9GFINGB0LXRgtC10LkuINCa0L7Qs9C00LAt0YLQviDRjyDRgdC80L7RgtGA0LXQuyDQsiDR gdGC0L7RgNC+0L3RgyBuZnQsINC90L4KPiDQtNC+0LrRg9C80LXQvdGC0LDRhtC40Y8v0L/RgNC4 0LzQtdGA0Ysg0LHRi9C70Lgg0YHQu9C40YjQutC+0Lwg0L3QtdCy0L3Rj9GC0L3Ri9C80LgsINC8 0L7QttC10YIg0YfQtdCz0L4g0L/QvtC80LXQvdGP0LvQvtGB0Ywg0YEKPiDRgtC10YUg0L/QvtGA PwoK0KMg0LzQtdC90Y8g0YHRgdGFINGC0L7Qu9GM0LrQviDQv9C+INC60LvRjtGH0YMsINGC0LDQ uiDRh9GC0L4g0L3QtdGCINC90YPQttC00Ysg0L7Qs9GA0LDQvdC40YfQuNCy0LDRgtGMINCy0YXQ vtC0INC70LjRiNGMINC00L7QstC10YDQtdC90L3Ri9C80Lgg0YHQtdGC0Y/QvNC4LgrQn9C+0LvQ sNCz0LDRjiwg0YLQtdGFLCDRgyDQutC+0LPQviDQv9C+INC/0LDRgNC+0LvRjiwg0L7RgiDQsdGA 0YPRgtGE0L7RgNGB0LAg0LzQvtC20LXRgiDQv9GA0LjQutGA0YvRgtGMINGE0LXQudC7MtCx0LDQ vSAtINC90L4g0LHQtdGA0LXQttGR0L3QvtCz0L4uLi4K0JLQvtGCINCy0LXRgdGMINGB0L/QuNGB 0L7QuiAo0YHQtdGC0Ysg0YPQttC1INGE0LXQudC7MtCx0LDQvSDQtNC+0LHQsNCy0LjQuyk6Cgpb cm9vdEBndyB+XSMgbmZ0IGxpc3QgcnVsZXNldAp0YWJsZSBpcCBmaWx0ZXIgewogICAgICAgIHNl dCBzc2hkIHsKICAgICAgICAgICAgICAgIHR5cGUgaXB2NF9hZGRyCiAgICAgICAgICAgICAgICBm bGFncyB0aW1lb3V0CiAgICAgICAgfQoKICAgICAgICBzZXQgc3NoZC1kZG9zIHsKICAgICAgICAg ICAgICAgIHR5cGUgaXB2NF9hZGRyCiAgICAgICAgICAgICAgICBmbGFncyB0aW1lb3V0CiAgICAg ICAgfQoKICAgICAgICBzZXQgcmVjaWRpdmUgewogICAgICAgICAgICAgICAgdHlwZSBpcHY0X2Fk ZHIKICAgICAgICAgICAgICAgIGZsYWdzIHRpbWVvdXQKICAgICAgICB9CgogICAgICAgIGNoYWlu IGlucHV0IHsKICAgICAgICAgICAgICAgIHR5cGUgZmlsdGVyIGhvb2sgaW5wdXQgcHJpb3JpdHkg MDsgcG9saWN5IGRyb3A7CiAgICAgICAgICAgICAgICBpcCBzYWRkciBAcmVjaWRpdmUgY291bnRl ciBwYWNrZXRzIDAgYnl0ZXMgMCByZWplY3QKICAgICAgICAgICAgICAgIHRjcCBkcG9ydCB7IHNz aH0gaXAgc2FkZHIgQHNzaGQtZGRvcyBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAwIHJlamVjdAog ICAgICAgICAgICAgICAgdGNwIGRwb3J0IHsgc3NofSBpcCBzYWRkciBAc3NoZCBjb3VudGVyIHBh Y2tldHMgMCBieXRlcyAwIHJlamVjdAogICAgICAgICAgICAgICAgY3Qgc3RhdGUgaW52YWxpZCBj b3VudGVyIHBhY2tldHMgMjAgYnl0ZXMgMjUwNyBkcm9wCiAgICAgICAgICAgICAgICBjdCBzdGF0 ZSB7IHJlbGF0ZWQsIGVzdGFibGlzaGVkfSBhY2NlcHQKICAgICAgICAgICAgICAgIGN0IHN0YXRl IG5ldyB1ZHAgZHBvcnQgeyB0cmFjZXJvdXRlLTMzNTIzLCA0NDQ1MC00NDUwMH0gbG9nIHJlamVj dAogICAgICAgICAgICAgICAgY3Qgc3RhdGUgbmV3IHRjcCBkcG9ydCBzc2ggdGNwIGZsYWdzICYg KHN5biB8IGFjaykgPT0gc3luIGNvdW50ZXIgcGFja2V0cyAxIGJ5dGVzIDUyIGFjY2VwdAogICAg ICAgICAgICAgICAgaWNtcCB0eXBlIGVjaG8tcmVxdWVzdCBsaW1pdCByYXRlIDEwL3NlY29uZCBi dXJzdCA1IHBhY2tldHMgYWNjZXB0CiAgICAgICAgICAgICAgICBpcCBwcm90b2NvbCBpY21wIGRy b3AKICAgICAgICAgICAgICAgIGlpZiB7IGxvLCBsYW59IGFjY2VwdAogICAgICAgICAgICAgICAg aWlmbmFtZSAhPSAibG8iIGlwIGRhZGRyIDEyNy4wLjAuMC84IGNvdW50ZXIgcGFja2V0cyAwIGJ5 dGVzIDAgZHJvcAogICAgICAgICAgICAgICAgY291bnRlciBwYWNrZXRzIDI3MzUzMiBieXRlcyAz OTQ3MzI4MwogICAgICAgIH0KCiAgICAgICAgY2hhaW4gZm9yd2FyZCB7CiAgICAgICAgICAgICAg ICB0eXBlIGZpbHRlciBob29rIGZvcndhcmQgcHJpb3JpdHkgMDsgcG9saWN5IGRyb3A7CiAgICAg ICAgICAgICAgICBjdCBzdGF0ZSBpbnZhbGlkIGNvdW50ZXIgcGFja2V0cyAzODMgYnl0ZXMgMTk2 NzYgZHJvcAogICAgICAgICAgICAgICAgY3Qgc3RhdGUgeyByZWxhdGVkLCBlc3RhYmxpc2hlZH0g YWNjZXB0CiAgICAgICAgICAgICAgICBjdCBzdGF0ZSBuZXcgb2lmIGxhbiB0Y3AgZHBvcnQgeyBz c2gsIDgwMDZ9IHRjcCBmbGFncyAmIChzeW4gfCBhY2spID09IHN5biBjb3VudGVyIHBhY2tldHMg MCBieXRlcyAwIGFjY2VwdAogICAgICAgICAgICAgICAgY3Qgc3RhdGUgbmV3IGlpZiBsYW4gYWNj ZXB0CiAgICAgICAgICAgICAgICBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAwCiAgICAgICAgfQoK ICAgICAgICBjaGFpbiBvdXRwdXQgewogICAgICAgICAgICAgICAgdHlwZSBmaWx0ZXIgaG9vayBv dXRwdXQgcHJpb3JpdHkgMDsgcG9saWN5IGFjY2VwdDsKICAgICAgICAgICAgICAgIGN0IHN0YXRl IGludmFsaWQgY291bnRlciBwYWNrZXRzIDAgYnl0ZXMgMCBkcm9wCiAgICAgICAgICAgICAgICBj b3VudGVyIHBhY2tldHMgNjAxNzUgYnl0ZXMgMTQ1NDU5MTUKICAgICAgICB9Cn0KdGFibGUgaXAg bWFuZ2xlIHsKICAgICAgICBjaGFpbiBwb3N0cm91dGluZyB7CiAgICAgICAgICAgICAgICB0eXBl IHJvdXRlIGhvb2sgb3V0cHV0IHByaW9yaXR5IC0xNTA7IHBvbGljeSBhY2NlcHQ7CiAgICAgICAg ICAgICAgICBvaWYgdHYgaXAgdHRsIDEgY291bnRlciBwYWNrZXRzIDkyNyBieXRlcyAyOTY2NCBp cCB0dGwgNjQKICAgICAgICAgICAgICAgIGNvdW50ZXIgcGFja2V0cyA2MDE3NSBieXRlcyAxNDU0 NTkxNQogICAgICAgIH0KfQp0YWJsZSBpcCBuYXQgewogICAgICAgIGNoYWluIHByZXJvdXRpbmcg ewogICAgICAgICAgICAgICAgdHlwZSBuYXQgaG9vayBwcmVyb3V0aW5nIHByaW9yaXR5IC0xNTA7 IHBvbGljeSBhY2NlcHQ7CiAgICAgICAgICAgICAgICBpaWYgbGFuIHRjcCBkcG9ydCBodHRwIGNv dW50ZXIgcGFja2V0cyAzMTY2IGJ5dGVzIDE5NTcyMCByZWRpcmVjdCB0byBzcXVpZAogICAgICAg ICAgICAgICAgb2lmIGxhbiB0Y3AgZHBvcnQgODAwNiBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAw IGRuYXQgMTkyLjE2OC42LjI1NAogICAgICAgICAgICAgICAgb2lmIGxhbiB0Y3AgZHBvcnQgMjIy MiBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAwIGRuYXQgMTkyLjE2OC42LjE6c3NoCiAgICAgICAg ICAgICAgICBpaWYgY29ycCB0Y3AgZHBvcnQgMzM4OSBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAw IGRuYXQgMTkyLjE2OC42LjEKICAgICAgICAgICAgICAgIGNvdW50ZXIgcGFja2V0cyAzMTgyNjcg Ynl0ZXMgNDYxNTQxOTAKICAgICAgICB9CgogICAgICAgIGNoYWluIHBvc3Ryb3V0aW5nIHsKICAg ICAgICAgICAgICAgIHR5cGUgbmF0IGhvb2sgcG9zdHJvdXRpbmcgcHJpb3JpdHkgLTE1MDsgcG9s aWN5IGFjY2VwdDsKICAgICAgICAgICAgICAgIG9pZiBhYm9uIGNvdW50ZXIgcGFja2V0cyA0OTE0 IGJ5dGVzIDMwNzUyOSBzbmF0IDgxLjE2My4xMDUuMTAKICAgICAgICAgICAgICAgIG9pZiBjb3Jw IGNvdW50ZXIgcGFja2V0cyA0NjI5OSBieXRlcyAyNzIwMTAzIHNuYXQgMTkyLjE2OC4yNTUuNTUK ICAgICAgICAgICAgICAgIG9pZiBuZiBjb3VudGVyIHBhY2tldHMgMCBieXRlcyAwIHNuYXQgMTky LjE2OC4wLjE2NAogICAgICAgICAgICAgICAgb2lmIGdqYyBjb3VudGVyIHBhY2tldHMgMyBieXRl cyAyNTIgc25hdCAxNzIuMTcuMC41NQogICAgICAgICAgICAgICAgb2lmIHR2IGNvdW50ZXIgcGFj a2V0cyAxIGJ5dGVzIDMyIHNuYXQgMTAuODguODEuNQogICAgICAgICAgICAgICAgY291bnRlciBw YWNrZXRzIDIwIGJ5dGVzIDEzMjgKICAgICAgICB9Cn0KCi0tCtCc0LjQvNC+INC60YDQvtC60L7Q tNC40LsuCldCUiwgcmVkbmV4IENJTy4KQ2VsbDogKzcoOTY0KTEwMy02NS02NwpWaWJlciA9IENl bGwKSklEID0gPG1haWx0bzo+ClNreXBlID0gJGxvY2FsX3BhcnRAPG1haWx0bzo+Cg==