|
iptables-translate -t filter -A INPUT -m dscp --dscp 0x32 -j ACCEPT
|
|
nft add rule ip filter INPUT ip dscp 0x32 counter accept
|
|
|
|
ip6tables-translate -t filter -A INPUT -m dscp ! --dscp 0x32 -j ACCEPT
|
|
nft add rule ip6 filter INPUT ip6 dscp != 0x32 counter accept
|