mirror of
https://git.netfilter.org/nftables
synced 2026-01-26 18:39:03 +00:00
The meta keyword currently accepts 'STRING' arguments. This was originally done to avoid pollution the global token namespace. However, nowadays we do have flex scopes to avoid this. Add the tokens currently handled implciitly via STRING within META flex scope. SECPATH is a compatibility alias, map this to IPSEC token. IBRPORT/OBRPORT are also compatibility aliases, remove those tokens and handle this directly in scanner.l. This also avoids nft from printing tokens in help texts that are only there for compatibility with old rulesets. meta_key_parse() is retained for json input parser. Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: Phil Sutter <phil@nwl.cc>