Re: nftables: Strange Error When Adding Element to Named Set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



*From:* Mike Dillinger [mailto:miked@xxxxxxxxxxxxxx]
*To:* Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
*Cc:* netfilter@xxxxxxxxxxxxxxx, sbrivio@xxxxxxxxxx
*Date:* Monday, June 1, 2020, 9:07 AM PDT
*Subject:* nftables: Strange Error When Adding Element to Named Set

Yes, I have found a way to reproduce it.

Add the set:
nft add set ip filter blacklist4-ip-1m {type ipv4_addr\; flags interval,timeout \; timeout 1m \; gc-interval 1m\;}

We're not concerned about the IP's that are added to the set because there are no rules covering what to do with the set contents.

I wrote a bash script called nftables-bug-repro:
#!/bin/bash
nft list set ip filter blacklist4-ip-1m
for ((i=1;i<=10;i++)); do
    nft add element filter blacklist4-ip-1m {$i.$i.$i.$i}
    sleep 1
done
nft list set ip filter blacklist4-ip-1m

Hi Pablo, Stefan, et al,

I wanted to check and see if anyone was able to reproduce the issue.  If not, I'd like to figure out what's unique about my setup so I can resolve the issue on my end.

Thanks!
-MikeD



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux