3 ms·
Anchors look suspiciously like creating a new chain in iptables. Tables there doesn't seem to be any direct analog, though can be done similarly by creating a
by simcop2387 13y ago
Anchors look suspiciously like creating a new chain in iptables. Tables there doesn't seem to be any direct analog, though can be done similarly by creating a chain that matches the list of addresses you're interested in and forwarding the rules there.
That said both of pf's versions look better than iptables. nftables looks like it does a better job of this like pf does, which is definitely a good thing.