On Mon, Oct 20, 2014 at 03:32:09PM +0200, Alvaro Neira Ayuso wrote: > If we use this rule: > > nft add rule bridge filter input \ > ether type ip reject with icmp type host-unreachable > > or that: > > nft add rule inet filter input \ > meta nfproto ipv4 reject with icmp type host-unreachable > > we have a segfault because we add a network dependency when we already have > network context. Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html