Re: nftables: named set for ipv4 networks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Is there a fix in sight for this? Can I be of assistance somehow?

Best
Leon

On Thu, 3 Nov 2016 12:29:28 +0100
Arturo Borrero Gonzalez <arturo@xxxxxxxxxx> wrote:

> On 2 November 2016 at 11:30, Leon Merten Lohse <leon@xxxxxxxxxxxxx>
> wrote:
> > I would really appreciate if someone could comment on this.
> >
> > The problem is that nft complains about overlapping intervals in the
> > set, if I load the following ruleset twice.
> > This occurs even though there is a `flush ruleset' directive at the
> > beginning of the ruleset. As far as I understand it, all sets
> > should be empty after that.
> > Calling `nft flush ruleset' beforehand works around this but is no
> > longer atomic.
> >  
> 
> Yes, this is probably some bug in the nft cache.
> 
> Will send a testcase so we don't forget about fixing this.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter"
> in the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux