similar to: [Bug 939] New: extensions: NFQUEUE: missing cpu-fanout

https://bugzilla.netfilter.org/show_bug.cgi?id=933 Summary: queue: Incorrect use of option with queue Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy:

https://bugzilla.netfilter.org/show_bug.cgi?id=992 Bug ID: 992 Summary: Missing space between NFQUEUE extra parameters Product: iptables Version: 1.4.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: iptables-save Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=1322 Bug ID: 1322 Summary: Accepting in an nfqueue breaks multi-chain processing Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at

Hi all, I have been trying to run an IDS system on OpenVZ based VPS which requires that I run this IPTABLES command : iptables -A FORWARD -j NFQUEUE However, so far I have not suceeded. I always get this errors: iptables: Unknown error 4294967295 Even when the NFQUEUE  IP modules was enabled by the VPS provider, I still get these errors and this appears to be OpenVZ bug.  So I want to

https://bugzilla.netfilter.org/show_bug.cgi?id=918 Summary: Ranges and comparat Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at gmail.com

https://bugzilla.netfilter.org/show_bug.cgi?id=949 Summary: icmpv6 id option doesn't work Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy:

The netfilter project presents: nftables 0.2 This release contains a rather large number of bug fixes, syntax cleanups, new features, support for all new features contained in the recent 3.14 kernel release as well as *drumroll* documentation. Syntax changes ============== * More consistency in data type names Data type names are used in set declarations. All address related types now

https://bugzilla.netfilter.org/show_bug.cgi?id=925 Summary: icmp: ICMPv4 types are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy:

https://bugzilla.netfilter.org/show_bug.cgi?id=898 Summary: You can not add a non-name set with more than 255 elements aprox. Do not show any error. Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=946 Summary: Cannot invert a protocol: ip protocol != tcp Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org

Hi! The Netfilter project presents: nftables 0.3 This release contains bug fixes, syntax cleanups, new features, support for all new features contained in the recent 3.15 kernel release. Syntax changes ============== * More compact syntax for the queue action, eg. nft add rule test input queue num 1 You can also express the multiqueue as a range, followed by options. nft add rule

https://bugzilla.netfilter.org/show_bug.cgi?id=1742 Bug ID: 1742 Summary: using nfqueue breaks SCTP connection (tracking) Product: libnetfilter_queue Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_queue Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=901 Summary: Can not add a rule with a 'hdrlength' value as IPv4 header expression Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=897 Summary: Numbers of caracter in the name of set. Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=902 Summary: Can not add a rule with a 'version' value as IPv4 header expression Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=948 Summary: tcp doff option crashes nft Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at gmail.com

https://bugzilla.netfilter.org/show_bug.cgi?id=895 Summary: Add a 'ipv6_address' set into a ipv4 table and vice versa Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=932 Summary: TOS: An Invert mask in TOS Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at

https://bugzilla.netfilter.org/show_bug.cgi?id=954 Summary: iffname doesn't work with sets. Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at

https://bugzilla.netfilter.org/show_bug.cgi?id=931 Summary: limit: -limit-burst is not supported in nft Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org