How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
Chen Linxuan <[email protected]> Tue, 15 Apr 2025 14:52:02 +0800
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <CAC1kPDOzuhA9T2PDrYX8c9833B3QY7ECYDaXKE4zbkyc1FfX1w@mail.gmail.com> |
I am trying to determine whether it is possible to achieve functionality equivalent to iptables -m owner --socket-exist using nft. From my understanding, the socket expression in nft does not seem to directly allow for a simple check of whether a socket exists. Could you please provide guidance or suggestions on how to achieve this in nft? Best regards, Chen Linxuan