Before, nft fails to restore some rules because it sees: insert rule ip filter INPUT iifname iifname ip ... Add extra escaping for " so that the shell won't remove it and nft will see 'iifname "iifname"'. Signed-off-by: Florian Westphal <fw@xxxxxxxxx> --- xlate-test.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xlate-test.py b/xlate-test.py index f3fcd797af90..5711a6427d78 100755 --- a/xlate-test.py +++ b/xlate-test.py @@ -104,7 +104,7 @@ def test_one_replay(name, sourceline, expected, result): "flush ruleset", "add table " + fam + table_name, "add chain " + fam + table_name + " " + chain_name - ] + [ l.removeprefix("nft ") for l in expected.split("\n") ] + ] + [ l.removeprefix("nft ") for l in expected.replace('\"', '\\"', -1).split("\n") ] # feed input via the pipe to make sure the shell "does its thing" cmd = "echo \"" + "\n".join(nft_input) + "\" | " + args.nft + " -f -" -- 2.37.4