Displaying 1 result from an estimated 1 matches for "appcontrol_tcp".
2020 Aug 27
0
[Bug 1455] New: Queue verdict cannot be used in vmap
...e: pablo at netfilter.org
Reporter: phillc at gmail.com
I'm not sure if this is a bug, not implemented, or as designed.
I am trying to use a vmap to direct traffic to NFQueue when specific criteria
are matched.
The map has been defined and a rule using it:
table ip filter {
map AppControl_TCP {
type ipv4_addr . ipv4_addr . inet_service : verdict
}
chain Forward {
type filter hook forward priority filter; policy drop;
ip saddr . ip daddr . tcp dport vmap @AppControl_TCP
}
...
}
But I cannot assign the verdict "queue num 3" to the map. The following err...