BUG: nft cannot "list ruleset" with interval maps

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



(please forgive stupid email word wrap)

# nft table ip nat
# nft map nat dnat_example { type inet_service: ipv4_addr\; flags interval \; }
# nft element nat dnat_example { 3476-3480 : 192.168.14.12 }
# nft list ruleset
table ip nat {
	map dnat_example {
		type inet_service : ipv4_addr
		flags interval
nft: mini-gmp.c:4311: mpz_export: Assertion `size > 0 || u->_mp_size == 0' failed.
		elements = { 3476-Aborted

So the entry seems to have gotten in alright but it can't come back out normally. I can tell because a "export json" works

# nft export json
{"nftables":[{"table":{"name":"nat","family":"ip","flags":0,"use":1}},{"set":{"name":"dnat_example","table":"nat","flags":12,"family":"ip","key_type":13,"key_len":2,"data_type":7,"data_len":4,"set_elem":[{"flags":1,"key":{"reg":{"type":"value","len":2,"data0":"0x0000990d"}}},{"key":{"reg":{"type":"value","len":2,"data0":"0x0000940d"}},"data":{"reg":{"type":"value","len":4,"data0":"0x0c0ea8c0"}}},{"flags":1,"key":{"reg":{"type":"value","len":2,"data0":"0x00000000"}}}]}}]}


NOTE: interval sets work fine:

# nft list ruleset
table ip nat {
	set portrange {
		type inet_service
		flags interval
		elements = { 3776-3780}
	}
}

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux