Hi, On Sun, Jul 24, 2016 at 04:17:49PM +0800, Xin Long wrote: > nftable transform 'x !=a-b' in wrong way: > cmp x < a > cmp x > b > > which means x has to be x<a && x>b. > but it should be x<a || x>b. > > It seems that the vm system in kernel is too simple and fast > to provide some expr or process for this case, afaics. > > does upstream have been preparing some fix for this ? Will be sending a fix for this asap. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html