Solution Bugzilla Issue 1659 - iptables-nft v1.8.9 Error: meta sreg key not supported

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have recently encountered the issue described in the aforementioned Bugzilla issue (#1659)  as, among others, Debian 12 ships the affected iptables v1.8.9. This can trip up a number of other applications that rely on the iptables command, including the Docker daemon, preventing it from creating correct FW rules if any nftables "meta" rules are present during startup.

After some bisecting, I was able to determine that this issue was introduced by commit 66806feef085c0504966c484f687bdf7b09510e3 ("nft: Fix meta statement parsing"). Reverting the commit in question resolves the issue, and no further errors are produced by builds of the 1.8.9 version.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux