xref: /aosp_15_r20/external/iptables/extensions/libip6t_ah.txlate (revision a71a954618bbadd4a345637e5edcf36eec826889) 
1ip6tables-translate -A INPUT -m ah --ahspi 500 -j DROP
2nft 'add rule ip6 filter INPUT ah spi 500 counter drop'
3
4ip6tables-translate -A INPUT -m ah --ahspi 500:550 -j DROP
5nft 'add rule ip6 filter INPUT ah spi 500-550 counter drop'
6
7ip6tables-translate -A INPUT -m ah ! --ahlen 120
8nft 'add rule ip6 filter INPUT ah hdrlength != 120 counter'
9
10ip6tables-translate -A INPUT -m ah --ahres
11nft 'add rule ip6 filter INPUT ah reserved 1 counter'
12
13ip6tables-translate -A INPUT -m ah --ahspi 500 ! --ahlen 120 -j DROP
14nft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength != 120 counter drop'
15
16ip6tables-translate -A INPUT -m ah --ahspi 500 --ahlen 120 --ahres -j ACCEPT
17nft 'add rule ip6 filter INPUT ah spi 500 ah hdrlength 120 ah reserved 1 counter accept'
18