Re: nftables won't accept default very simple empty filter chains on Armbian/espressobin

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jan 10, 2019 at 11:01:59PM +0100, Pablo Neira Ayuso wrote:
> On Thu, Jan 10, 2019 at 12:07:11PM -0800, Daniel Lakeland wrote:
> > Apologies for how badly Thunderbird mangled my email when it converted it to
> > plain text, hopefully this can help clarify what the heck was going on.
> > 
> > cat /etc/nftables.conf
> > 
> > flush ruleset
> > 
> > table inet filter {
> >     chain input { type filter hook input priority 0; policy accept;    }
> >     chain forward {
> >         type filter hook forward priority 0; policy accept;
> >     }
> >     chain output {
> >         type filter hook output priority 0; policy accept;
> >     }
> > }
> > 
> > root@tottenham:~# nft -f /etc/nftables.conf
> > /etc/nftables.conf:5:15-19: Error: Could not process rule: No such file or
> > directory
> >     chain input { type filter hook input priority 0; policy accept;    }
> >                  ^^^^^
> > /etc/nftables.conf:6:15-21: Error: Could not process rule: No such file or
> > directory
> >     chain forward {
> >                  ^^^^^^^
> > /etc/nftables.conf:9:15-20: Error: Could not process rule: No such file or
> > directory
> >     chain output {
> >                  ^^^^^^
> 
> Did you compile your kernel with NF_TABLES_INET=y ?

I would have a look at your .config to review your nf_tables
configuration, make sure nothing was left behind unset.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux