| Message ID | 1404742796-8039-2-git-send-email-giorgio.nicole@arcor.de |
|---|---|
| State | Not Applicable |
| Delegated to: | Pablo Neira |
| Headers | show |
diff --git a/files/nftables/Makefile.am b/files/nftables/Makefile.am new file mode 100644 index 0000000..32dced3 --- /dev/null +++ b/files/nftables/Makefile.am @@ -0,0 +1,13 @@ + +pkgsysconfdir = ${sysconfdir}/nftables +dist_pkgsysconf_DATA = bridge-filter \ + inet-filter \ + ipv4-filter \ + ipv4-mangle \ + ipv4-nat \ + ipv6-filter \ + ipv6-mangle \ + ipv6-nat + +install-data-hook: + ${SED} -i 's|@sbindir[@]|${sbindir}|g' ${DESTDIR}${pkgsysconfdir}/* diff --git a/files/nftables/bridge-filter b/files/nftables/bridge-filter index 54779c4..2add455 100644 --- a/files/nftables/bridge-filter +++ b/files/nftables/bridge-filter @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table bridge filter { chain input { type filter hook input priority -200; } diff --git a/files/nftables/inet-filter b/files/nftables/inet-filter index 9f3108f..f572db5 100644 --- a/files/nftables/inet-filter +++ b/files/nftables/inet-filter @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table inet filter { chain input { type filter hook input priority 0; } diff --git a/files/nftables/ipv4-filter b/files/nftables/ipv4-filter index 3174e7a..a4ca7f2 100644 --- a/files/nftables/ipv4-filter +++ b/files/nftables/ipv4-filter @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table filter { chain input { type filter hook input priority 0; } diff --git a/files/nftables/ipv4-mangle b/files/nftables/ipv4-mangle index 27327d3..be564a5 100644 --- a/files/nftables/ipv4-mangle +++ b/files/nftables/ipv4-mangle @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table mangle { chain output { type route hook output priority -150; } diff --git a/files/nftables/ipv4-nat b/files/nftables/ipv4-nat index 99d6951..01c6c3d 100644 --- a/files/nftables/ipv4-nat +++ b/files/nftables/ipv4-nat @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table nat { chain prerouting { type nat hook prerouting priority -150; } diff --git a/files/nftables/ipv6-filter b/files/nftables/ipv6-filter index 98fce02..ce4d7de 100644 --- a/files/nftables/ipv6-filter +++ b/files/nftables/ipv6-filter @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table ip6 filter { chain input { type filter hook input priority 0; } diff --git a/files/nftables/ipv6-mangle b/files/nftables/ipv6-mangle index 7274353..fa32402 100644 --- a/files/nftables/ipv6-mangle +++ b/files/nftables/ipv6-mangle @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table ip6 mangle { chain output { type route hook output priority -150; } diff --git a/files/nftables/ipv6-nat b/files/nftables/ipv6-nat index 33ecf9b..3f57c56 100644 --- a/files/nftables/ipv6-nat +++ b/files/nftables/ipv6-nat @@ -1,4 +1,4 @@ -#! nft -f +#! @sbindir@nft -f table ip6 nat { chain prerouting { type nat hook prerouting priority -150; }