Hi, On Sat, Mar 17, 2018 at 11:04 AM, Ninad <ninad@xxxxxxxxxx> wrote: > Dear All, > > I am novice to nftables and trying to use it as a firewall. I have created > few basic rules as follows. > > nft add table ip mangle > nft add chain ip mangle PREROUTING { type filter hook prerouting priority 0; > policy accept; } > nft add set mangle myset {type ipv4_addr; flags constant, interval;} You don't need those flags. Just use: nft add set mangle myset {type ipv4_addr;} -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html