ARPTABLES(8) System Manager's Manual ARPTABLES(8) (NAME) arptables-nft - nftables ARP (SYNOPSIS) arptables [-t table] {-A|-D} chain rule-specification [options...] arptables [-t table] -I chain [rulenum] rule-specification arptables [-t table] -R chain rulenum rule-specification arptables [-t table] -D chain rulenum arptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] arptables [-t table] -N chain arptables [-t table] -X [chain] arptables [-t table] -P chain policy arptables [-t table] -E old-chain-name new-chain-name rule-specification := [matches...] [target] match := -m matchname [per-match-options] target := -j targetname [per-target-options] (DESCRIPTION) arptables ARP . ARP . arptables iptables arptables . (CHAINS) . (chain) . ARP . ARP . <<>> (target) . . ( ) <<>> . (TARGETS) ARP . . : ACCEPT DROP CONTINUE RETURN <<>> ( ) . ACCEPT . DROP . CONTINUE . () . RETURN () . (TARGET-EXTENSIONS) . (TABLES) ARP . filter . -t filter arptables . -t arptables . -t, --table filter : INPUT ( ) OUTPUT ( ). (OPTIONS) arptables . . (COMMANDS) arptables -t . -t filter . -Z . -A, --append . -D, --delete . . start_nr[:end_nr] . -I . . -I, --insert . N -N N+1 . i i i-N-1 . 0 -A . -R, --replace . N 1 N . i . -P, --policy (policy) . ACCEPT DROP RETURN . -F, --flush (flush) . . . -Z, --zero . . -Z -L . -Z -L . -L, --list . . -N, --new-chain . . . -X, --delete-chain . arptables . . -E, --rename-chain . . PREBRIDGING PREROUTING -E PREROUTING . arptables arptables . . arptables arptables . (MISCELLANEOUS COMMANDS) -V, --version arptables. -h, --help . -j, --jump target (target) . : ACCEPT DROP CONTINUE RETURN ( (TARGET-EXTENSIONS) ) . -c, --set-counters PKTS BYTES ( INSERT APPEND REPLACE). (RULE-SPECIFICATIONS) ( ). <> . . -s, --source-ip [!] address[/mask] IP . -d, --destination-ip [!] address[/mask] IP . --source-mac [!] address[/mask] MAC . . --destination-mac [!] address[/mask] MAC . . -i, --in-interface [!] name ( INPUT). --in-if . -o, --out-interface [!] name ( OUTPUT). --out-if . -l, --h-length length[/mask] ( ). --opcode code[/mask] ( ). : 1 = Request 2 = Reply 3 = Request_Reverse 4 = Reply_Reverse 5 = DRARP_Request 6 = DRARP_Reply 7 = DRARP_Error 8 = InARP_Request 9 = ARP_NAK. --h-type type[/mask] ( ). : 1 = Ethernet. --proto-type type[/mask] ( ). : 0x800 = IPv4. (TARGET-EXTENSIONS) arptables -m iptables . . mangle --mangle-ip-s IP address IP (mangle ). --mangle-ip-d IP address IP . --mangle-mac-s MAC address MAC . --mangle-mac-d MAC address MAC . --mangle-target target mangle ARP ( DROP CONTINUE ACCEPT -- ACCEPT ). CLASSIFY skb->priority ( CBQ ). --set-class major:minor (major) (minor) . () 0x . MARK skb->mark ( u32 ). --set-mark mark (mark) . 0x . --and-mark mark AND . --or-mark mark OR . (NOTES) nft arptables FORWARD . ARP (bridge) <<>> (forward) FORWARD ebtables . (MAILINGLISTS) : http://netfilter.org/mailinglists.html (SEE ALSO) xtables-nft(8) iptables(8) ebtables(8) ip(8) : https://wiki.nftables.org March 2019 ARPTABLES(8)