On Thu, Mar 09, 2023 at 02:43:50PM +0100, Phil Sutter wrote: > Yet another Bison workaround: Instead of the fancy error message, an > incomprehensible syntax error is emitted: > > | # iptables-nft -A FORWARD -p tcp -m osf --genre linux > | # nft list ruleset | nft -f - > | # Warning: table ip filter is managed by iptables-nft, do not touch! > | /dev/stdin:4:29-31: Error: syntax error, unexpected osf, expecting string > | meta l4proto tcp xt match osf counter packets 0 bytes 0 > | ^^^ > > Avoid this by quoting the extension name when printing: > > | # nft list ruleset | sudo ./src/nft -f - > | # Warning: table ip filter is managed by iptables-nft, do not touch! > | /dev/stdin:4:20-33: Error: unsupported xtables compat expression, use iptables-nft with this ruleset > | meta l4proto tcp xt match "osf" counter packets 0 bytes 0 > | ^^^^^^^^^^^^^^ LGTM.