xref: /aosp_15_r20/external/iptables/extensions/libebt_ip6.txlate (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-src ! dead::beef/64 -j ACCEPT
2*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ip6 saddr != dead::/64 counter accept'
3*a71a9546SAutomerger Merge Worker
4*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 ! --ip6-dst dead:beef::/64 -j ACCEPT
5*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ip6 daddr != dead:beef::/64 counter accept'
6*a71a9546SAutomerger Merge Worker
7*a71a9546SAutomerger Merge Workerebtables-translate -I FORWARD -p ip6 --ip6-dst f00:ba::
8*a71a9546SAutomerger Merge Workernft 'insert rule bridge filter FORWARD ip6 daddr f00:ba:: counter'
9*a71a9546SAutomerger Merge Worker
10*a71a9546SAutomerger Merge Workerebtables-translate -I OUTPUT -o eth0 -p ip6 --ip6-tclass 0xff
11*a71a9546SAutomerger Merge Workernft 'insert rule bridge filter OUTPUT oifname "eth0" ip6 dscp 0x3f counter'
12*a71a9546SAutomerger Merge Worker
13*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-proto tcp --ip6-dport 22
14*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ether type ip6 tcp dport 22 counter'
15*a71a9546SAutomerger Merge Worker
16*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-proto udp --ip6-sport 1024:65535
17*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ether type ip6 udp sport 1024-65535 counter'
18*a71a9546SAutomerger Merge Worker
19*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-proto 253
20*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ether type ip6 meta l4proto 253 counter'
21*a71a9546SAutomerger Merge Worker
22*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6  --ip6-protocol icmpv6 --ip6-icmp-type "echo-request"
23*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmpv6 type 128 counter'
24*a71a9546SAutomerger Merge Worker
25*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-protocol icmpv6  --ip6-icmp-type 1/1
26*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmpv6 type 1 icmpv6 code 1 counter'
27*a71a9546SAutomerger Merge Worker
28*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip6 --ip6-protocol icmpv6 --ip6-icmp-type ! 1:10
29*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmpv6 type != 1-10 counter'
30