Displaying 1 result from an estimated 1 matches for "predefrag".
2020 Jan 30
2
[Bug 1402] New: Race errors with nft
...d of duplicate (or even trippled) dumps of the same
tables/rules
Test files to reproduce
-----------------------
R1.tf
```
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
set DROP-NETS-V4 {
type ipv4_addr
flags interval
elements = { 1.2.3.0/27 }
}
chain predefrag {
type filter hook prerouting priority -450; policy accept;
ip frag-off & 49151 != 0 counter packets 0 bytes 0 drop
ip6 nexthdr ipv6-frag counter packets 0 bytes 0 drop
}
chain INPUT {
type filter hook input priority 0; policy drop;
udp sport dom...