On 09.10, Pablo Neira Ayuso wrote:
> On Fri, Oct 09, 2015 at 11:35:32AM +0200, Arturo Borrero Gonzalez wrote:
> > Hi,
> >
> > i'm playing with nftables maps and found some issues.
> >
> > First:
> >
> > I can add this named map in the CLI but I can't load it from a file.
> > This can be reproduced with these commands:
> >
> > % nft flush ruleset
> > % nft add table t
> > % nft add map t m { type ipv4_addr : ipv4_addr ; }
> > % nft add element t m {1.1.1.1: 2.2.2.2 }
> > % echo "flush ruleset" > test.nft
> > % nft list ruleset >> test.nft
> > % nft -f test.nft
> > test.nft:5:28-46: Error: mapping outside of map context
> > elements = { 1.1.1.1 : 2.2.2.2}
> > ^^^^^^^^^^^^^^^^^^^
>
> Known issue, our grammar is invoking the evaluating the elements
> before it has actually evaluated the declaration.
It is? Just had a quick look so I might be wrong, but it seems we're simply
not adding the set to the context before we're evaluating the elements.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
