nftables 0.6.3

Safe abstraction for nftables JSON API. It can be used to create nftables rulesets in Rust and parse existing nftables rulesets from JSON.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

table ip synproxy_anonymous {

    chain PREROUTING {
        type filter hook prerouting priority raw; policy accept;
        tcp dport 8080 tcp flags syn notrack
    }

    chain INPUT {
        type filter hook input priority filter; policy accept;
        tcp dport 8080 ct state invalid,untracked synproxy mss 1460 wscale 7 timestamp sack-perm
        ct state invalid drop
    }
}

table ip synproxy_named {

    synproxy synproxy_named_1 {
        mss 1460
        wscale 7
        timestamp sack-perm
    }

    synproxy synproxy_named_2 {
        mss 1460
        wscale 5
    }

    chain PREROUTING {
        type filter hook prerouting priority raw; policy accept;
        tcp dport 8080 tcp flags syn notrack
    }

    chain FORWARD {
        type filter hook forward priority filter; policy accept;

        ct state invalid,untracked synproxy name ip saddr map {
            192.168.1.0/24 : "synproxy_named_1", 
            192.168.2.0/24 : "synproxy_named_2",
        }
    }
}