>
>> nft thinkts the set doesn't exit, I can't reproduce it here.
>> sets are scoped to the table they live in, are you perhaps creating this
>> set in e.g. table x and try to use it in table y?
>
To keep things simple constructed the below from scratch however |Error:
Set 'icmp_he' does not exist| is persistent. Unless there is an issue
with syntax it seems to be either bug in 0.8.2 or a feature not
available in that version.
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
chain input {
type filter hook input priority 0; policy drop;
ct state 2,4 accept
ct state 1 drop
icmp type @icmp_he meta nftrace set 1 accept
}
chain forward {
type filter hook forward priority 0;
}
chain output {
type filter hook output priority 0;
}
}
table inet filter {
set icmp_he {
type inet_proto
elements = { 0, 3, 11, 12, 14, 16, 18 }
flags constant
size 7
}
}
��.n��������+%������w��{.n����z���)�� jg��� �����ݢj����G���� ���j:+v���w�m������w�������h�����٥
