Re: nft - concatenate ifaces

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>
>> nft thinkts the set doesn't exit, I can't reproduce it here.
>> sets are scoped to the table they live in, are you perhaps creating this
>> set in e.g. table x and try to use it in table y?
>
To keep things simple constructed the below from scratch however |Error:
Set 'icmp_he' does not exist| is persistent. Unless there is an issue
with syntax it seems to be either bug in 0.8.2 or a feature not
available in that version.


#!/usr/sbin/nft -f

flush ruleset

table inet filter {
    chain input {
        type filter hook input priority 0; policy drop;
    ct state 2,4 accept
    ct state 1 drop
    icmp type @icmp_he meta nftrace set 1 accept
    }
    chain forward {
        type filter hook forward priority 0;
    }
    chain output {
        type filter hook output priority 0;
    }
}

table inet filter {
  set icmp_he {
    type inet_proto
    elements = { 0, 3, 11, 12, 14, 16, 18 }
    flags constant
    size 7
  }
}


��.n��������+%������w��{.n����z��׫�)��jg��������ݢj����G�������j:+v���w�m������w�������h�����٥




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux