ebtables-nft can't delete complex rules by specifying complete rule with kernel 6.3+

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

We started to observe the issue regarding ebtables-nft and how it
can't wipe rules when specifying full rule. Removing the rule by index
works fine, though. Also with kernel 6.1.y it works completely fine.

I've started with 1.8.8 provided in CentOS Stream 9, then tried the
latest git version and all behave exactly the same. See the behavior
below. As you can see, simple DROP works, but more complex one do not.

As bugzilla requires some special sign-up procedure, apologize for
reporting it directly here in the ML.

# ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 0, policy: ACCEPT

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT
# ebtables -t nat -N barani
# ebtables -t nat -A barani -i br_public --among-src fa:16:3e:26:bf:42 -j RETURN
# ebtables -t nat -D barani -i br_public --among-src fa:16:3e:26:bf:42 -j RETURN
ebtables v1.8.9 (nf_tables):  RULE_DELETE failed (Invalid argument):
rule in chain barani
# ebtables -t nat -A barani -j DROP
# ebtables -t nat -D barani -j DROP
# ebtables -t nat -L barani
Bridge table: nat

Bridge chain: barani, entries: 1, policy: RETURN
-i br_public --among-src fa:16:3e:26:bf:42 -j RETURN
# ebtables -t nat -D barani 1
# ebtables -t nat -L barani
Bridge table: nat

Bridge chain: barani, entries: 0, policy: RETURN



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux