Duncan: Inserted missing "equal" rule; changed "non equal" to "not equal"; italicised equal and not equal to match other rules;use "which stands for" throughout

2017-08-15T21:54:36Z

Inserted missing "equal" rule; changed "non equal" to "not equal"; italicised equal and not equal to match other rules;use "which stands for" throughout

← Older revision		Revision as of 21:54, 15 August 2017
Line 1:		Line 1:
	''nftables'' provides the following built-in operations:		''nftables'' provides the following built-in operations:

	* '''ne''' which stands for ~~non~~ equal. Alternatively you can use '''!='''.		* '''eq''' which stands for ''equal''. Alternatively you can use '''=='''.
	* '''lt''' ~~means~~ ''less than''. Alternatively you can use '''<'''.		* '''ne''' which stands for ''not equal''. Alternatively you can use '''!='''.
	* '''gt''' ~~means~~ ''greater than''. Alternatively you can use '''>'''.		* '''lt''' which stands for ''less than''. Alternatively you can use '''<'''.
	* '''le''' ~~means~~ ''less than or equal to''. Alternatively you can use '''<='''.		* '''gt''' which stands for ''greater than''. Alternatively you can use '''>'''.
	* '''ge''' ~~means~~ ''greater than or equal to''. Alternatively you can use '''>='''.		* '''le''' which stands for ''less than or equal to''. Alternatively you can use '''<='''.
			* '''ge''' which stands for ''greater than or equal to''. Alternatively you can use '''>='''.

	'''Beware''': if you use the symbols '''<''' and '''>''' from the shell since it will interpret those as the standard input and output redirection respectively. You will need to escape them, eg. '''\<'''.		'''Beware''': if you use the symbols '''<''' and '''>''' from the shell since it will interpret those as the standard input and output redirection respectively. You will need to escape them, eg. '''\<'''.

Pablo: Created page with "''nftables'' provides the following built-in operations: * '''ne''' which stands for non equal. Alternatively you can use '''!='''. * '''lt''' means ''less than''. Alternativ..."

2016-07-13T17:49:13Z

Created page with "''nftables'' provides the following built-in operations: * '''ne''' which stands for non equal. Alternatively you can use '''!='''. * '''lt''' means ''less than''. Alternativ..."

New page

''nftables'' provides the following built-in operations:

* '''ne''' which stands for non equal. Alternatively you can use '''!='''.
* '''lt''' means ''less than''. Alternatively you can use '''<'''.
* '''gt''' means ''greater than''. Alternatively you can use '''>'''.
* '''le''' means ''less than or equal to''. Alternatively you can use '''<='''.
* '''ge''' means ''greater than or equal to''. Alternatively you can use '''>='''.

'''Beware''': if you use the symbols '''<''' and '''>''' from the shell since it will interpret those as the standard input and output redirection respectively. You will need to escape them, eg. '''\<'''.

The following example shows how to match all incoming traffic ''not'' coming to port TCP/22.

<source lang="bash">
nft add rule filter input tcp dport != 22
</source>

Similarly, you can also match traffic coming to high ports with the following command:

<source lang="bash">
nft add rule filter input tcp dport >= 1024
</source>

Building rules through expressions - Revision history

Duncan: Inserted missing "equal" rule; changed "non equal" to "not equal"; italicised equal and not equal to match other rules;use "which stands for" throughout

Pablo: Created page with "''nftables'' provides the following built-in operations: * '''ne''' which stands for non equal. Alternatively you can use '''!='''. * '''lt''' means ''less than''. Alternativ..."