Andrew
Andrew
Just use full mask, thats all I wanted to tell. There is no CIDR for mac addresses.
Something wrong with parentheses ;-)
You can compile ucode and ./run_tests.sh (it is a bit tricky first time, you have to disable all or most extensions via cmake-gui or parameters)
You dont have to check special case with 0 or -1 mask that makes no-op-ish rules
Wait for @jow- to examine it.
It is double no in your sentence meaning YES in some languages...
exclamation mark is called negation in iptables doc eg "negative matching using exclamation mark is supported"
nftables takes all imaginable formats in ```c table inet t { chain c { ether saddr & 01:00:00:00:00:00 == 0x0 ether saddr "02-00-00-00-00-00"-"04.ff.ff.ff.ff.ff" } } ``` out ```c table inet...
99% of users will supply valid values but we dont want others to break ruleset.
Something similar by @ptpt52 (pre-dating my impromptu re-invention) ? https://github.com/x-wrt/x-wrt/blob/master/package/network/config/firewall4/patches/200-fw4-hotplug-fork.patch