On Mon, Dec 18, 2017 at 11:08:21AM +0100, Arturo Borrero Gonzalez wrote: > On 17 December 2017 at 23:02, Jeff <jarvis@xxxxxxxxxx> wrote: ... > > - Reloading the firewall before all interfaces referenced in > > /etc/nftables.conf are up results in errors > > > > Don't use 'iif', but 'iifname'. > To elaborate a little: iifname does a string comparison of the interface name so is slower than iif which does a numeric comparison of the interface index. You can only use iif on interfaces with a fixed index number and which exist (i.e. pretty much hardware interfaces e.g. wlan0 & eth0, but not ppp0 or virbr0). If you are getting this error for hardware interfaces, it may be an artifact of your very old software revisions. I have no trouble with wlan0, Cheers ... Duncan. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
