On 25 September 2013 10:51, Anand Raj Manickam <anandrm@xxxxxxxxx> wrote: > How do i add a multiport rule > nft add rule ip filter output tcp dports 99,200 ip daddr 1.1.1.1 > counter meta oif eth0 fails. > > > I see that the range works, > nft add rule ip filter output tcp dport 99-105 ip daddr 1.1.1.1 > counter meta oif eth0 Try with an anonymous set: nft add rule filter output tcp dport {99 , 200} ip daddr 1.1.1.1 counter meta oif eth0 -- Arturo Borrero González -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html