search for: niconorsk

...ulti-chain processing Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at netfilter.org Reporter: niconorsk at gmail.com Created attachment 553 --> https://bugzilla.netfilter.org/attachment.cgi?id=553&action=edit Packet trace examples I am trying to make NAT decisions in an nfqueue, but given this is not supported as a verdict in queues, what I am doing is this: - Accept and set a packet mark...

...else does not work Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: niconorsk at gmail.com Testing with the 0.9.0 release which added the ability to create named sets with type ifname Get the following error: > nft create set inet filter keepalived_ranges4 { type inet_service . ifname \; } > Error: Empty string is not allowed > create set inet filter keepalived_ra...

...at can be parsed by nft -f Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: niconorsk at gmail.com Steps to reproduce: - add a rule with mark or logic: nft add rule inet filter input ct mark set ct mark or 0x1 - export your ruleset: nft list ruleset > ruleset - try to import your ruleset: nft -f ruleset Result: ruleset.json:143:22-22: Error: syntax error, unexpected comma, exp...