On Fri, Dec 07, 2018 at 02:05:15PM +0100, Florian Westphal wrote: > Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > Add ip-saddr, ip-daddr, ether-saddr, ether-daddr for arp, eg. > > > > # nft add table arp x > > # nft add chain arp x y { type filter hook input priority 0\; } > > # nft add rule arp x y arp ip-saddr 192.168.2.1 counter > > 'arp {ip,ether} {s,d}addr' would create ambiguities? That's my concern moving forward with the grammar, but I can double check more carefully. I just quickly jumped on this when looking at one of the bugzilla issues. > If so, this '-' notation seems ok to me. Thanks.