Displaying 2 results from an estimated 2 matches for "blocklistssh".
2019 Mar 24
3
[Bug 1327] New: Cannot use named set for matching IPv4 networks
...an GNU/Linux
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: email at cs-ware.de
I've the following (for this bug report reduced) ruleset in nftables:
table inet filter {
set blocklistssh4 {
type ipv4_addr
}
chain blocklistssh {
}
}
Now, issuing "add rule inet filter blocklistssh ip saddr & 255.0.0.0
@blocklistssh4 drop" causes "nft -f file" to segfault. Issuing this statement
in "nft -i" reveals the followi...
2019 Mar 30
4
[Bug 1330] New: Parse error for importing set with netmask
...rdware: All
OS: All
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: email at cs-ware.de
Create the following rules:
# nft add table inet filter
# nft add set inet filter blocklistssh4_8 { type ipv4_addr\; }
# nft add element inet filter blocklistssh4_8 { 1.1.1.1 }
# nft add chain inet filter blocklistssh
# nft add inet filter blocklistssh ip saddr \& 255.0.0.0 @blocklistssh4_8
counter drop
Pipe into file:
# nft list ruleset > rules.nftables
Flush ruleset:
# nft flush r...