bugzilla-daemon at netfilter.org
2014-May-13 12:25 UTC
[Bug 932] New: TOS: An Invert mask in TOS
https://bugzilla.netfilter.org/show_bug.cgi?id=932
Summary: TOS: An Invert mask in TOS
Product: nftables
Version: unspecified
Platform: x86_64
OS/Version: Debian GNU/Linux
Status: NEW
Severity: normal
Priority: P5
Component: nft
AssignedTo: pablo at netfilter.org
ReportedBy: anarey at gmail.com
Estimated Hours: 0.0
Without show some error message, you can add a rule using invert option with
flags, but after, you can not show the table. Here some examples of this bug.
$ sudo nft add rule ip test3 input ip tos and 0x04 == 0x02 counter accept
$ sudo nft list table test3
table ip test3 {
chain input {
ip tos & 4 == 2 counter packets 0 bytes 0 accept
}
}
[Here, all is ok]
$ sudo nft add rule ip test3 input ip tos and 0x04 != 0x02 counter accept
$ sudo nft list table test3
[ERROR: The table is not shown]
The last commit in Pablo git tree of kernel is "40e6442 netfilter:
x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use
mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional
output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"
--
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
bugzilla-daemon at netfilter.org
2014-Aug-15 10:54 UTC
[Bug 932] TOS: An Invert mask in TOS
https://bugzilla.netfilter.org/show_bug.cgi?id=932
Yuxuan Shui <yshuiv7 at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
CC| |yshuiv7 at gmail.com
Resolution| |WORKSFORME
--- Comment #1 from Yuxuan Shui <yshuiv7 at gmail.com> 2014-08-15 12:54:29
CEST ---
Can not reproduce it on my computer.
--
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
Possibly Parallel Threads
- [Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error.
- [Bug 888] New: Assertion errors attempting a statement which (I believe) is grammatically correct.
- [Bug 108651] New: Screen flickering when using compositor with OpenGL backend
- [Bug 924] New: Range: It is not possible invert a range of ip address
- [Bug 934] New: frag: Invert a range in frag