On Tue, Dec 29, 2015 at 10:41:59PM +0100, Florian Westphal wrote: > nft fails to parse certain corner-cases, for example: > > nft add rule filter input meta rtclassid daddr > > ... as it finds DADDR token. However, 'daddr' might be a valid > routing realm listed in iproute2/rt_realms, so this should be allowed. We should probably have a look at lex "start conditions" [1]. I think it's possible to disable scanner rules from the parser based on our context via yy_push_state(), thus the scanner rules are enabled/disabled. With the patchset I have just posted, we know have a rule for specific constant rhs of the relational. [1] https://www.freebsd.org/cgi/man.cgi?query=lex&sektion=1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html