Alexander Mikhalitsyn <alexander.mikhalitsyn@xxxxxxxxxxxxx> wrote: > At the moment, status_xlate_print function prints statusmask as comma-separated > sequence of enabled statusmask flags. But if we have inverted conntrack ctstatus > condition then we have to use more complex expression (if more than one flag enabled) > because nft not supports syntax like "ct status != expected,assured". Also applied.