Phil Sutter <phil@xxxxxx> wrote: > This reverts commit df4ee3171f3e3c0e85dd45d555d7d06e8c1647c5 as it > breaks ipsec expression if preceeded by a counter statement: > > | Error: syntax error, unexpected string, expecting saddr or daddr > | add rule ip ipsec-ip4 ipsec-forw counter ipsec out ip daddr 192.168.1.2 > | ^^^^^ > > Signed-off-by: Phil Sutter <phil@xxxxxx> > --- > Changes since v1: > - Fold the two patches into one. Please hold back a bit, I think this is a bug in the scoping code on nft side, not a flex or bison limitation. I've applied the test case locally and will report back on alternate fix for this bug.
