On 26 October 2016 at 03:30, James Feeney <james@xxxxxxxxxxx> wrote: > > I'm guessing that that error message is wildly off-base. > > Or is "reject" not a proper "terminal statement"? > > Or is there something wrong with the syntax? I can't reproduce the issue here. % nft -f test.nft % nft list ruleset table ip private { chain postroute { type filter hook postrouting priority 0; policy accept; oifname "enp3s0" ip daddr 192.168.0.0/16 reject } } -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html