bugzilla-daemon at netfilter.org
2014-May-13  12:25 UTC
[Bug 932] New: TOS: An Invert mask in TOS
https://bugzilla.netfilter.org/show_bug.cgi?id=932
           Summary: TOS: An Invert mask in TOS
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey at gmail.com
   Estimated Hours: 0.0
Without show some error message, you can add a rule using invert option with
flags, but after, you can not show the table. Here some examples of this bug.
 $ sudo nft add rule ip test3 input ip tos and 0x04 == 0x02 counter accept
 $ sudo nft list table test3
table ip test3 {
    chain input {
         ip tos & 4 == 2 counter packets 0 bytes 0 accept
    }
}
[Here, all is ok]
 $ sudo nft add rule ip test3 input ip tos and 0x04 != 0x02 counter accept
 $ sudo nft list table test3
[ERROR: The table is not shown]
The last commit in Pablo git tree of kernel is "40e6442 netfilter:
x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use
mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional
output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"
-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
bugzilla-daemon at netfilter.org
2014-Aug-15  10:54 UTC
[Bug 932] TOS: An Invert mask in TOS
https://bugzilla.netfilter.org/show_bug.cgi?id=932
Yuxuan Shui <yshuiv7 at gmail.com> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |yshuiv7 at gmail.com
         Resolution|                            |WORKSFORME
--- Comment #1 from Yuxuan Shui <yshuiv7 at gmail.com> 2014-08-15 12:54:29
CEST ---
Can not reproduce it on my computer.
-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
Apparently Analagous Threads
- [Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error.
- [Bug 888] New: Assertion errors attempting a statement which (I believe) is grammatically correct.
- [Bug 108651] New: Screen flickering when using compositor with OpenGL backend
- [Bug 924] New: Range: It is not possible invert a range of ip address
- [Bug 934] New: frag: Invert a range in frag