netfilter buglog - Feb 2020 - [Bug 1409] New: nft manpage makes confusing reference to logical operators

https://bugzilla.netfilter.org/show_bug.cgi?id=1409

            Bug ID: 1409
           Summary: nft manpage makes confusing reference to logical
                    operators
           Product: nftables
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: cheetah-netfilter at fastcat.org

The nft manpage / docs say:
> Expressions can be combined using binary, logical, relational and other
types of
> expressions to form complex or relational (match) expressions
http://git.netfilter.org/nftables/tree/doc/nft.txt#n680

However it's not clear if logical combinations are actually possible? 
https://bugzilla.netfilter.org/show_bug.cgi?id=1202#c1 explicitly states that
disjunctions are definitely not supported, so logical OR, and XOR are right
out, and given that I'd say NAND almost certainly is too.  The only
combining
operator for matches is AND.

Also, rummaging through the grammar file seems to confirm that there are only
_bitwise_ operators.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200227/404c73a6/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1409

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
(In reply to Matthew "Cheetah" Gabeler-Lee from comment
#0)
> The nft manpage / docs say:
> 
> > Expressions can be combined using binary, logical, relational and
other types of
> > expressions to form complex or relational (match) expressions
> 
> http://git.netfilter.org/nftables/tree/doc/nft.txt#n680
> 
> However it's not clear if logical combinations are actually possible? 
> https://bugzilla.netfilter.org/show_bug.cgi?id=1202#c1 explicitly states
> that disjunctions are definitely not supported, so logical OR, and XOR are
> right out, and given that I'd say NAND almost certainly is too.  The
only
> combining operator for matches is AND.
> 
> Also, rummaging through the grammar file seems to confirm that there are
> only _bitwise_ operators.
Please, post examples of what you would like to see in place.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200415/824ab6b5/attachment-0001.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1409

--- Comment #2 from Matthew "Cheetah" Gabeler-Lee
<cheetah-netfilter at fastcat.org> ---
I think it should just say "binary and relational operators"? There
aren't any
logical operators supported as far as I can tell, unless you count the implicit
"and" that happens when chaining expressions one after the other in a
rule.

Perhaps to be more precise in that case, something along the lines of:

  Expressions can be combined using binary, relational, and other
  numeric operators, and combined in a logical "and" by placing
  multiple expressions in sequence within a rule.

I'm not sure that's ideal wording, but I think it's closer.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200416/6e91956f/attachment.html>