blob: 2b931eebf68e97fc225e333fb3e9fc82fb4b64e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
#!/bin/bash
set -e
$NFT add table t
$NFT add chain t output {type nat hook output priority 0 \; }
$NFT add chain t c1
$NFT add rule t c1 masquerade
# kernel should return EOPNOTSUPP
$NFT add rule t output tcp dport vmap {1 :jump c1 } 2>/dev/null || exit 0
echo "E: accepted masquerade in output hook in a vmap" >&2
exit 1
|
