Displaying 1 result from an estimated 1 matches for "jac_linux".
Did you mean:
smac_linux
2017 Nov 13
2
[Bug 1202] New: Cannot match on both dport and sport in one nftables rule
...rule
Product: nftables
Version: unspecified
Hardware: x86_64
OS: Debian GNU/Linux
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: jac_linux at yahoo.com
In nftables v0.5 I could have the following rule to match on EITHER sport or
dport in the same rule:
tcp sport ssh tcp dport ssh counter accept
In nftables v0.7 this no longer works.
I can add the rule, but it won't match a packet.
If the packet has dport = ssh, it won't matc...