Found extra tables in nft ruleset

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



It's looking like nft is creating some extra tables when I create a chain.

Seen below, I can clear the ruleset and then create a table and only the
table I created is in the otherwise empty ruleset.  However, if I add a
chain to that table, then two unasked for tables get created, but
perhaps not used.  I'm not sure if they are supposed to be there or if
they should be used.

Is this an error on my part?  If so what?

Thanks,
Lars

# uname -sr
Linux 4.19.97-v7l+

# nft --version
nftables v0.9.0 (Fearless Fosdick)

# nft flush ruleset

# nft list ruleset

# nft add table ip foobar

# nft list ruleset
table ip foobar {
}

# nft add chain foobar output  { type filter hook output priority 0 \;
policy drop \; }

# nft list ruleset
table ip foobar {
        chain output {
                type filter hook output priority 0; policy drop;
        }
}
table ip filter {
        chain INPUT {
                type filter hook input priority 0; policy accept;
        }

        chain FORWARD {
                type filter hook forward priority 0; policy accept;
        }

        chain OUTPUT {
                type filter hook output priority 0; policy accept;
        }
}
table ip6 filter {
        chain INPUT {
                type filter hook input priority 0; policy accept;
        }

        chain FORWARD {
                type filter hook forward priority 0; policy accept;
        }

        chain OUTPUT {
                type filter hook output priority 0; policy accept;
        }
}



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux