Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > # nft -f ruleset.nft > ruleset.nft:3:28-35: Error: expression is not a concatenation > ip protocol . th dport { tcp / 22, } > ^^^^^^^^ > > Therefore, a852022d719e ("datatype: do not assert when value exceeds > expected width") not needed anymore after two previous fixes. We can't rely on the expression soup coming from nftables.