On Fri, Sep 04, 2015 at 02:32:31PM +0100, Alex Chapman wrote:
> Hi Pablo,
>
> Thanks for the response. Do I need kernel 4.2 to support this? I'm on 4.1 currently and the command below is erroring:
>
> # nft add rule ip firewall forward meta iif . meta oif vmap { eth0 . lo : jump test }
> <cmdline>:1:55-79: Error: Could not process rule: Invalid argument
> add rule ip firewall forward meta iif . meta oif vmap { eth0 . lo : jump test }
> ^^^^^^^^^^^^^^^^^^^^^^^^^
> <cmdline>:1:55-79: Error: Could not process rule: No such file or directory
> add rule ip firewall forward meta iif . meta oif vmap { eth0 . lo : jump test }
> ^^^^^^^^^^^^^^^^^^^^^^^^^
> <cmdline>:1:1-79: Error: Could not process rule: No such file or directory
> add rule ip firewall forward meta iif . meta oif vmap { eth0 . lo : jump test }
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> (table named firewall and both 'forward' and 'test' chains configured).
You need this oneliner fix:
http://git.kernel.org/cgit/linux/kernel/git/pablo/nf.git/commit/?id=bf798657eb5ba57552096843c315f096fdf9b715
It's on its way to 4.3-rc and will send to -stable 4.1 and 4.2 asap.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
