On Wed, Sep 6, 2023 at 2:46 PM Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > On Wed, Sep 06, 2023 at 07:08:40PM +0200, Phil Sutter wrote: > [...] > > The last six come from the 'reset rules table t1' command. While on one > > hand it looks like nftables fits only three rules into a single skb, > > your fix seems to have a problem in that it doesn't subtract s_idx from > > *idx. > > Please, feel free to follow up to refine, thanks. Forgive me if I'm wrong, but it sounds as though Phil was pointing out a bug and not an area of refinement, is that correct Phil? If it is a bug, please submit a fix for this as soon as possible Pablo. -- paul-moore.com
