Re: named vmaps

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Nov 21, 2014 at 09:22:00AM +0100, Bjørnar Ness wrote:
> Is support for named vmaps removed from nft? Running kernel 3.18.0-rc5
> and nft head.
> 
> I am able to create the named vmap:
> 
> nft add map filter my_vmap { type ipv4_addr : verdict\; }
> 
> ..but when I try to add elements to it:
> 
> nft add element filter my_vmap { 1.0.0.0 : drop}
> <cmdline>:1:40-43: Error: syntax error, unexpected drop
> add element filter my_vmap { 1.0.0.0 : drop}
>                                        ^^^^
> 
> also, when trying to use the vmap in a rule:
> 
> nft add rule filter input ip saddr vmap @my_vmap
> <cmdline>:1:37-37: Error: syntax error, unexpected @, expecting '{'
> add rule filter input ip saddr vmap @my_vmap

Sent you several patches, please confirm this resolves your problems.

> Dont find anything in "documentation" or online that tells me if and when this
> functionality changed/broke/got removed.

I have updated the documentation:

http://wiki.nftables.org/wiki-nftables/index.php/Dictionaries

Please, let me know if you find any mistake on it. Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux