bugzilla-daemon at netfilter.org
2020-Sep-25 12:09 UTC
[Bug 1473] New: [log] not printing in combination with ct state and set update a/o rate limit
https://bugzilla.netfilter.org/show_bug.cgi?id=1473 Bug ID: 1473 Summary: [log] not printing in combination with ct state and set update a/o rate limit Product: nftables Version: unspecified Hardware: arm OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: vtolkm at gmail.com kernel 5.9.0-rc6 armv7l | nft 0.9.6 ____ works (as in printing log): ct state != { 2,4 } log flags all prefix "foo DROP: " drop; not printing log: ct state != { 2,4 } update @foo { ip6 saddr limit rate over 500/second burst 25 packets } log flags all prefix "foo DROP: " drop; monitoring the set foo it is apparent that elements being updated and the rule works for that portion however log is not being printed which inhibits debugging. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200925/31cbaf41/attachment.html>
bugzilla-daemon at netfilter.org
2020-Sep-25 17:16 UTC
[Bug 1473] [log] not printing in combination with ct state and set update a/o rate limit
https://bugzilla.netfilter.org/show_bug.cgi?id=1473 vtolkm at gmail.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #1 from vtolkm at gmail.com --- Looks like some mishap in the node's config, it is now printing the log. -- You are receiving this mail because: You are watching all bug changes. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200925/0a3b8ad0/attachment.html>
Apparently Analagous Threads
- [Bug 1465] New: [vmap] ct state concatenation not working
- [Bug 1472] New: [sets] global named sets that can be utilised across families
- [Bug 1468] New: [netdev] dropping ether type vlan frames drops ICMPv6 type 134
- [Bug 1466] New: [sets] add support for combination of counter and limit
- [Bug 1470] New: [sets] improve flags combination