search for: myset

...Component: nft Assignee: pablo at netfilter.org Reporter: apex at xepa.nl Hi there, I would like to report a bug with the nft ecosystem pertaining to the auto-merge setting during the export / import in the JSON format for a set. Example: # nft 'add set inet filter myset { type ipv4_addr; flags interval; auto-merge }' # nft 'list set inet filter myset' table inet filter { set myset { type ipv4_addr flags interval auto-merge } } # nft --json 'list set inet filter myset' | jq '.nftables[1]' { "set&quo...

...currently moving my iptables/ipset setups to nftables. I did a few experiments with scripting sets and encountered the following bug in nftables 0.9.0-2 (Debian 10) as well as 0.9.3-2 (Ubuntu 20.04). If I have the following simple script to set up a set: #!/usr/sbin/nft -f add set inet filter myset { type ipv4_addr; flags interval; auto-merge } add element inet filter myset { 192.168.0.0/24 } add element inet filter myset { 192.168.0.2 } add element inet filter myset { 192.168.1.0/24 } add element inet filter myset { 192.168.1.100 } After loading this script with `nft -f', I run...

...0.9.6.r42.g0864c2d4-1 on uname -a Linux iArchEFI 5.7.12-arch1-1 #1 SMP PREEMPT Fri, 31 Jul 2020 17:38:22 +0000 x86_64 GNU/Linux Consider the following series of commands: flush ruleset add table ip filter add set ip filter myset { type ipv4_addr ; flags interval ;} add element ip filter myset { 61.37.150.6/32, 114.237.203.25/32, 82.113.66.69/32, 36.89.143.21/32, 58.57.4.238/32, 117.69.147.239/32, 103.221.253.242/32, 49.88.218.208/32, 88.203.202.102/32, 175.106.18.201/32, 201.140.110.78/32, 178.21.206.74/32, 202.137.155.47/...

...res= connect(sock, (struct sockaddr *) &server, sizeof(struct sockaddr_un)); if (res < 0) { perror("connecting stream socket"); close(sock); return(1); } else tv.tv_sec = 15; tv.tv_usec = 0; FD_ZERO(&myset); FD_SET(sock, &myset); if (select(sock+1, NULL, &myset, NULL, &tv) > 0) { len = sizeof(int); getsockopt(sock, SOL_SOCKET, SO_ERROR, (void*)(&result), &len); if (result) { fprintf(stderr, "Error in connection...

On the Mac it's pretty easy to get to a USB drive by name. For example the following command works if you have a USB drive named "MYUSB" setwd('/Volumes/MYUSB') Is there a way to do the same thing in Windows (without knowing the drive letter)? Thanks! [[alternative HTML version deleted]]

https://bugzilla.netfilter.org/show_bug.cgi?id=1147 Bug ID: 1147 Summary: iptables rule to match a 'set' shows [unsupported revision] Product: iptables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5

Hi, My first post here, so help me right if I'm not following protocol. My problem basically boils down to this. I need this program to download the data from me and my wife's pedometers for health insurance purposes. This program is supposed to work on Win 2000 through Vista, but should run on 7 as well. I'm running latest Wine ( 1.3.xx from PPA) on Kubuntu 11.10. It installs

Hi all, I'm relatively new to Ubuntu and I will most likely install WINE on my next desktop for gaming. However my present puter is an Acer netbook and I would like to run MS Paint on it. I know you will tell me there are a lot of other Ubuntu apps that can do the job but I want MS Paint and it would be nice if I didn't have to log in and out of OS's just to access MS Paint from time

...avgpkt in original direction: # nft add rule x y ct original avgpkt gt 200 * Allow to flush maps and flow tables, eg. # nft flush map filter map1 # nft flush flow table filter ft-https * Allow to embed set definition into an existing set, eg. # nft -f ruleset.nft define myset = { 1.1.1.0, 2.2.2.0, } add rule ip saddr { $myset, 3.3.3.0 } And scripting like now works too: define dnat_ports = { 1234-1567 } define port_allow = { 53, # dns $dnat_ports, # dnat } * Slightly bet...