Hi,
I'm trying to match gratuitous arp with nftables. I've tried
nft add rule bridge filter somechain arp saddr ip == arp daddr ip
but nft (some commits before 0.9.2) says:
Error: syntax error, unexpected daddr, expecting end of file or newline
or semicolon
add rule bridge filter FORWARD arp saddr ip == arp daddr ip
^^^^^
Looking at the description of the netlink protocol, it looks like two
loads and a cmp of both registers would do it.
Am I'm correct that this is currently not possible with nft, so a patch
to nft would be needed?
Thanks,
M. Braun
