Re: autoload of nft modules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Apr 27, 2016 at 10:52:13AM +0200, Daniel Wagner wrote:
> Hi,
> 
> Dragos and I are working on getting nft support into ConnMan [1]. Now we
> face a small problem with the rule we load, which are essentially:
> 
>  nft add table connman
>  nft add chain connman nat-prerouting			\
> 	{ type nat hook prerouting priortiy 0 ; }
>  nft add chain connman nat-postrouting			\
> 	{ type nat hook postrouting priortiy 0 ; }
>  nft add chain connman filter-output			\
> 	{ type filter hook output priority 0 ; }
> 
> These work nicely using the nft CLI but when we run those commands
> via libnftnl after a fresh reboot of the system, there is a ENOENT at
> the third rule.

Most likely you're missing the NLM_F_CREATE flags in your netlink
messages.

Please, send us patches for the example so other don't hit this
problem.

Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux