On Tue, 5 Apr 2022 01:17:05 +0000 Lukas Straub <lukasstraub2@xxxxxx> wrote: > Hello Everyone, > I want to set up a rule that matches as long as the current time (/time > of packet reception) is smaller than a given unix timestamp. However > the whole "meta time" expression seems to be broken. I can't get it to > work with either a unix timestamp or iso time. What's weird is that > after setting the rule and listing it again, it will always display a > date around 1970 instead of whatever was entered. > > Reproducer: > nft "add chain inet filter prg_policy; flush chain inet filter prg_policy; add rule inet filter prg_policy meta time < $(date --date='now + 2 hours' '+%s') accept" > nft list chain inet filter prg_policy > > Reproducer 2: > nft "add chain inet filter prg_policy; flush chain inet filter prg_policy; add rule inet filter prg_policy meta time \"2022-04-01 01:00\" - \"2022-04-10 01:00\" accept" > nft list chain inet filter prg_policy > > nftables v1.0.2 (Lester Gooch) > Linux usbrouter 5.10.0-13-armmp #1 SMP Debian 5.10.106-1 (2022-03-17) armv7l GNU/Linux > > Regards, > Lukas Straub > Hmm, after staring at the code for a bit. I could imagine it's due to time_t being 32 bit on my platform and nftables trying to stuff a unix timstamp with nanosecond resolution in it... Regards, Lukas Straub --
Attachment:
pgp9aOaPvWec2.pgp
Description: OpenPGP digital signature
