On 2020/01/31 21:57, Frank Myhr wrote:
must every chain that contains set-matching rules be defined in the same _block_ (not just the same table) as the set being matched?
I guess this is no big deal if true. I've rearranged my ruleset's component files and now use a bash script to assemble them into a single input file for nft -f. This is a lot more flexible than trying to use multiple include statements in a manually-edited nft file, as I initially tried.
Thanks, Frank
