Re: [nft 0.9.3 | kernel 5.4.48] cannot get NAT to work

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 23/06/2020 22:48, Florian Westphal wrote:
ѽ҉ᶬḳ℠ <vtol@xxxxxxx> wrote:
It should work then but somehow does not, any way to figure out what is
going wrong then? I would rather prefer not having to return to IPT.
Works for me on 5.6.18:
table inet nat {
         chain prerouting {
                 type nat hook prerouting priority -100; policy accept;
         }

         chain input {
                 type nat hook input priority 100; policy accept;
         }

         chain output {
                 type nat hook output priority -100; policy accept;
         }

         chain postrouting {
                 type nat hook postrouting priority 100; policy accept;
         }
}

load with nft -f.

If it doesn't work, try 'table ip nat' or 'table ip6 nat'.

Afraid, neither variation works, each throwing

/etc/fw/test.conf:2:15-24: Error: Could not process rule: No such file or directory
        chain prerouting {
              ^^^^^^^^^^
/etc/fw/test.conf:6:15-19: Error: Could not process rule: No such file or directory
        chain input {
              ^^^^^
/etc/fw/test.conf:10:15-20: Error: Could not process rule: No such file or directory
        chain output {
              ^^^^^^
/etc/fw/test.conf:14:15-25: Error: Could not process rule: No such file or directory
        chain postrouting {
              ^^^^^^^^^^^

Don't know whether txt attachments are accepted on this ML but enclosed full debug output (if its gets through), through it does not seem to reveal anything useful?

Could this be a bug in the kernel?


~# nft --debug all -cf "/etc/fw/test.conf"
Entering state 0
Reducing stack by rule 1 (line 808):
-> $$ = nterm input (: )
Stack now 0
Entering state 1
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 253 ("table")
Next token is token "table" (: )
Shifting token "table" (: )
Entering state 11
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 449 ("ip6")
Next token is token "ip6" (: )
Shifting token "ip6" (: )
Entering state 37
Reducing stack by rule 303 (line 2161):
   $1 = token "ip6" (: )
-> $$ = nterm family_spec_explicit (: )
Stack now 0 1 11
Entering state 49
Reducing stack by rule 301 (line 2157):
   $1 = nterm family_spec_explicit (: )
-> $$ = nterm family_spec (: )
Stack now 0 1 11
Entering state 48
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("nat")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 55
Reducing stack by rule 295 (line 2133):
   $1 = token "string" (: )
-> $$ = nterm identifier (: )
Stack now 0 1 11 48
Entering state 276
Reducing stack by rule 308 (line 2168):
   $1 = nterm family_spec (: )
   $2 = nterm identifier (: )
-> $$ = nterm table_spec (: )
Stack now 0 1 11
Entering state 61
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 215 ("{")
Next token is token '{' (: )
Reducing stack by rule 162 (line 1486):
-> $$ = nterm table_block_alloc (: )
Stack now 0 1 11 61
Entering state 373
Next token is token '{' (: )
Shifting token '{' (: )
Entering state 908
Reducing stack by rule 164 (line 1506):
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138
Entering state 1303
Reducing stack by rule 166 (line 1508):
   $1 = nterm table_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 255 ("chain")
Next token is token "chain" (: )
Shifting token "chain" (: )
Entering state 1292
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("prerouting")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 55
Reducing stack by rule 295 (line 2133):
   $1 = token "string" (: )
-> $$ = nterm identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1404
Reducing stack by rule 312 (line 2202):
   $1 = nterm identifier (: )
-> $$ = nterm chain_identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1405
Reducing stack by rule 180 (line 1637):
-> $$ = nterm chain_block_alloc (: )
Stack now 0 1 11 61 373 908 1138 1292 1405
Entering state 1522
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 215 ("{")
Next token is token '{' (: )
Shifting token '{' (: )
Entering state 1579
Reducing stack by rule 181 (line 1643):
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("                ")
--accepting rule at line 387 ("type")
Next token is token "type" (: )
Shifting token "type" (: )
Entering state 1307
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("nat")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1425
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 250 ("hook")
Next token is token "hook" (: )
Shifting token "hook" (: )
Entering state 1533
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("prerouting")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1590
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 450 ("priority")
Next token is token "priority" (: )
Reducing stack by rule 289 (line 2100):
-> $$ = nterm dev_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590
Entering state 1643
Next token is token "priority" (: )
Shifting token "priority" (: )
Entering state 1545
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 234 ("-")
Next token is token "-" (: )
Shifting token "-" (: )
Entering state 1598
Reading a token: --accepting rule at line 612 ("100")
Next token is token "number" (: )
Shifting token "number" (: )
Entering state 1649
Reducing stack by rule 286 (line 2082):
   $1 = token "-" (: )
   $2 = token "number" (: )
-> $$ = nterm int_num (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1604
Reducing stack by rule 280 (line 2025):
   $1 = nterm int_num (: )
-> $$ = nterm extended_prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1603
Reducing stack by rule 277 (line 2011):
   $1 = token "priority" (: )
   $2 = nterm extended_prio_spec (: )
-> $$ = nterm prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643
Entering state 1689
Reducing stack by rule 276 (line 1983):
   $1 = token "type" (: )
   $2 = token "string" (: )
   $3 = token "hook" (: )
   $4 = token "string" (: )
   $5 = nterm dev_spec (: )
   $6 = nterm prio_spec (: )
-> $$ = nterm hook_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1311
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1311
Entering state 1426
Reducing stack by rule 184 (line 1646):
   $1 = nterm chain_block (: )
   $2 = nterm hook_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 313 ("policy")
Next token is token "policy" (: )
Shifting token "policy" (: )
Entering state 1306
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 274 ("accept")
Next token is token "accept" (: )
Shifting token "accept" (: )
Entering state 1420
Reducing stack by rule 293 (line 2129):
   $1 = token "accept" (: )
-> $$ = nterm chain_policy (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1423
Reducing stack by rule 292 (line 2120):
   $1 = nterm chain_policy (: )
-> $$ = nterm policy_expr (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1422
Reducing stack by rule 290 (line 2103):
   $1 = token "policy" (: )
   $2 = nterm policy_expr (: )
-> $$ = nterm policy_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1312
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1312
Entering state 1427
Reducing stack by rule 185 (line 1647):
   $1 = nterm chain_block (: )
   $2 = nterm policy_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 216 ("}")
Next token is token '}' (: )
Shifting token '}' (: )
Entering state 1664
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1664
Entering state 1699
Reducing stack by rule 168 (line 1510):
   $1 = nterm table_block (: )
   $2 = token "chain" (: )
   $3 = nterm chain_identifier (: )
   $4 = nterm chain_block_alloc (: )
   $5 = token '{' (: )
   $6 = nterm chain_block (: )
   $7 = token '}' (: )
   $8 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138
Entering state 1303
Reducing stack by rule 166 (line 1508):
   $1 = nterm table_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 255 ("chain")
Next token is token "chain" (: )
Shifting token "chain" (: )
Entering state 1292
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("input")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 55
Reducing stack by rule 295 (line 2133):
   $1 = token "string" (: )
-> $$ = nterm identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1404
Reducing stack by rule 312 (line 2202):
   $1 = nterm identifier (: )
-> $$ = nterm chain_identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1405
Reducing stack by rule 180 (line 1637):
-> $$ = nterm chain_block_alloc (: )
Stack now 0 1 11 61 373 908 1138 1292 1405
Entering state 1522
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 215 ("{")
Next token is token '{' (: )
Shifting token '{' (: )
Entering state 1579
Reducing stack by rule 181 (line 1643):
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("                ")
--accepting rule at line 387 ("type")
Next token is token "type" (: )
Shifting token "type" (: )
Entering state 1307
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("nat")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1425
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 250 ("hook")
Next token is token "hook" (: )
Shifting token "hook" (: )
Entering state 1533
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("input")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1590
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 450 ("priority")
Next token is token "priority" (: )
Reducing stack by rule 289 (line 2100):
-> $$ = nterm dev_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590
Entering state 1643
Next token is token "priority" (: )
Shifting token "priority" (: )
Entering state 1545
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 612 ("100")
Next token is token "number" (: )
Shifting token "number" (: )
Entering state 1599
Reducing stack by rule 285 (line 2081):
   $1 = token "number" (: )
-> $$ = nterm int_num (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1604
Reducing stack by rule 280 (line 2025):
   $1 = nterm int_num (: )
-> $$ = nterm extended_prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1603
Reducing stack by rule 277 (line 2011):
   $1 = token "priority" (: )
   $2 = nterm extended_prio_spec (: )
-> $$ = nterm prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643
Entering state 1689
Reducing stack by rule 276 (line 1983):
   $1 = token "type" (: )
   $2 = token "string" (: )
   $3 = token "hook" (: )
   $4 = token "string" (: )
   $5 = nterm dev_spec (: )
   $6 = nterm prio_spec (: )
-> $$ = nterm hook_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1311
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1311
Entering state 1426
Reducing stack by rule 184 (line 1646):
   $1 = nterm chain_block (: )
   $2 = nterm hook_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 313 ("policy")
Next token is token "policy" (: )
Shifting token "policy" (: )
Entering state 1306
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 274 ("accept")
Next token is token "accept" (: )
Shifting token "accept" (: )
Entering state 1420
Reducing stack by rule 293 (line 2129):
   $1 = token "accept" (: )
-> $$ = nterm chain_policy (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1423
Reducing stack by rule 292 (line 2120):
   $1 = nterm chain_policy (: )
-> $$ = nterm policy_expr (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1422
Reducing stack by rule 290 (line 2103):
   $1 = token "policy" (: )
   $2 = nterm policy_expr (: )
-> $$ = nterm policy_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1312
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1312
Entering state 1427
Reducing stack by rule 185 (line 1647):
   $1 = nterm chain_block (: )
   $2 = nterm policy_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 216 ("}")
Next token is token '}' (: )
Shifting token '}' (: )
Entering state 1664
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1664
Entering state 1699
Reducing stack by rule 168 (line 1510):
   $1 = nterm table_block (: )
   $2 = token "chain" (: )
   $3 = nterm chain_identifier (: )
   $4 = nterm chain_block_alloc (: )
   $5 = token '{' (: )
   $6 = nterm chain_block (: )
   $7 = token '}' (: )
   $8 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138
Entering state 1303
Reducing stack by rule 166 (line 1508):
   $1 = nterm table_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 255 ("chain")
Next token is token "chain" (: )
Shifting token "chain" (: )
Entering state 1292
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("output")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 55
Reducing stack by rule 295 (line 2133):
   $1 = token "string" (: )
-> $$ = nterm identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1404
Reducing stack by rule 312 (line 2202):
   $1 = nterm identifier (: )
-> $$ = nterm chain_identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1405
Reducing stack by rule 180 (line 1637):
-> $$ = nterm chain_block_alloc (: )
Stack now 0 1 11 61 373 908 1138 1292 1405
Entering state 1522
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 215 ("{")
Next token is token '{' (: )
Shifting token '{' (: )
Entering state 1579
Reducing stack by rule 181 (line 1643):
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("                ")
--accepting rule at line 387 ("type")
Next token is token "type" (: )
Shifting token "type" (: )
Entering state 1307
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("nat")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1425
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 250 ("hook")
Next token is token "hook" (: )
Shifting token "hook" (: )
Entering state 1533
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("output")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1590
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 450 ("priority")
Next token is token "priority" (: )
Reducing stack by rule 289 (line 2100):
-> $$ = nterm dev_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590
Entering state 1643
Next token is token "priority" (: )
Shifting token "priority" (: )
Entering state 1545
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 234 ("-")
Next token is token "-" (: )
Shifting token "-" (: )
Entering state 1598
Reading a token: --accepting rule at line 612 ("100")
Next token is token "number" (: )
Shifting token "number" (: )
Entering state 1649
Reducing stack by rule 286 (line 2082):
   $1 = token "-" (: )
   $2 = token "number" (: )
-> $$ = nterm int_num (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1604
Reducing stack by rule 280 (line 2025):
   $1 = nterm int_num (: )
-> $$ = nterm extended_prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1603
Reducing stack by rule 277 (line 2011):
   $1 = token "priority" (: )
   $2 = nterm extended_prio_spec (: )
-> $$ = nterm prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643
Entering state 1689
Reducing stack by rule 276 (line 1983):
   $1 = token "type" (: )
   $2 = token "string" (: )
   $3 = token "hook" (: )
   $4 = token "string" (: )
   $5 = nterm dev_spec (: )
   $6 = nterm prio_spec (: )
-> $$ = nterm hook_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1311
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1311
Entering state 1426
Reducing stack by rule 184 (line 1646):
   $1 = nterm chain_block (: )
   $2 = nterm hook_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 313 ("policy")
Next token is token "policy" (: )
Shifting token "policy" (: )
Entering state 1306
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 274 ("accept")
Next token is token "accept" (: )
Shifting token "accept" (: )
Entering state 1420
Reducing stack by rule 293 (line 2129):
   $1 = token "accept" (: )
-> $$ = nterm chain_policy (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1423
Reducing stack by rule 292 (line 2120):
   $1 = nterm chain_policy (: )
-> $$ = nterm policy_expr (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1422
Reducing stack by rule 290 (line 2103):
   $1 = token "policy" (: )
   $2 = nterm policy_expr (: )
-> $$ = nterm policy_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1312
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1312
Entering state 1427
Reducing stack by rule 185 (line 1647):
   $1 = nterm chain_block (: )
   $2 = nterm policy_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 216 ("}")
Next token is token '}' (: )
Shifting token '}' (: )
Entering state 1664
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1664
Entering state 1699
Reducing stack by rule 168 (line 1510):
   $1 = nterm table_block (: )
   $2 = token "chain" (: )
   $3 = nterm chain_identifier (: )
   $4 = nterm chain_block_alloc (: )
   $5 = token '{' (: )
   $6 = nterm chain_block (: )
   $7 = token '}' (: )
   $8 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138
Entering state 1303
Reducing stack by rule 166 (line 1508):
   $1 = nterm table_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 255 ("chain")
Next token is token "chain" (: )
Shifting token "chain" (: )
Entering state 1292
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("postrouting")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 55
Reducing stack by rule 295 (line 2133):
   $1 = token "string" (: )
-> $$ = nterm identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1404
Reducing stack by rule 312 (line 2202):
   $1 = nterm identifier (: )
-> $$ = nterm chain_identifier (: )
Stack now 0 1 11 61 373 908 1138 1292
Entering state 1405
Reducing stack by rule 180 (line 1637):
-> $$ = nterm chain_block_alloc (: )
Stack now 0 1 11 61 373 908 1138 1292 1405
Entering state 1522
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 215 ("{")
Next token is token '{' (: )
Shifting token '{' (: )
Entering state 1579
Reducing stack by rule 181 (line 1643):
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("                ")
--accepting rule at line 387 ("type")
Next token is token "type" (: )
Shifting token "type" (: )
Entering state 1307
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("nat")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1425
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 250 ("hook")
Next token is token "hook" (: )
Shifting token "hook" (: )
Entering state 1533
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 638 ("postrouting")
Next token is token "string" (: )
Shifting token "string" (: )
Entering state 1590
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 450 ("priority")
Next token is token "priority" (: )
Reducing stack by rule 289 (line 2100):
-> $$ = nterm dev_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590
Entering state 1643
Next token is token "priority" (: )
Shifting token "priority" (: )
Entering state 1545
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 612 ("100")
Next token is token "number" (: )
Shifting token "number" (: )
Entering state 1599
Reducing stack by rule 285 (line 2081):
   $1 = token "number" (: )
-> $$ = nterm int_num (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1604
Reducing stack by rule 280 (line 2025):
   $1 = nterm int_num (: )
-> $$ = nterm extended_prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643 1545
Entering state 1603
Reducing stack by rule 277 (line 2011):
   $1 = token "priority" (: )
   $2 = nterm extended_prio_spec (: )
-> $$ = nterm prio_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1307 1425 1533 1590 1643
Entering state 1689
Reducing stack by rule 276 (line 1983):
   $1 = token "type" (: )
   $2 = token "string" (: )
   $3 = token "hook" (: )
   $4 = token "string" (: )
   $5 = nterm dev_spec (: )
   $6 = nterm prio_spec (: )
-> $$ = nterm hook_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1311
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1311
Entering state 1426
Reducing stack by rule 184 (line 1646):
   $1 = nterm chain_block (: )
   $2 = nterm hook_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 313 ("policy")
Next token is token "policy" (: )
Shifting token "policy" (: )
Entering state 1306
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 653 (" ")
--accepting rule at line 274 ("accept")
Next token is token "accept" (: )
Shifting token "accept" (: )
Entering state 1420
Reducing stack by rule 293 (line 2129):
   $1 = token "accept" (: )
-> $$ = nterm chain_policy (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1423
Reducing stack by rule 292 (line 2120):
   $1 = nterm chain_policy (: )
-> $$ = nterm policy_expr (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1306
Entering state 1422
Reducing stack by rule 290 (line 2103):
   $1 = token "policy" (: )
   $2 = nterm policy_expr (: )
-> $$ = nterm policy_spec (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1312
Reading a token: --accepting rule at line 214 (";")
Next token is token "semicolon" (: )
Shifting token "semicolon" (: )
Entering state 5
Reducing stack by rule 4 (line 819):
   $1 = token "semicolon" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1312
Entering state 1427
Reducing stack by rule 185 (line 1647):
   $1 = nterm chain_block (: )
   $2 = nterm policy_spec (: )
   $3 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630
Entering state 1309
Reducing stack by rule 183 (line 1645):
   $1 = nterm chain_block (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm chain_block (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579
Entering state 1630
Reading a token: --(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--(end of buffer or a NUL)
--accepting rule at line 653 ("        ")
--accepting rule at line 216 ("}")
Next token is token '}' (: )
Shifting token '}' (: )
Entering state 1664
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 11 61 373 908 1138 1292 1405 1522 1579 1630 1664
Entering state 1699
Reducing stack by rule 168 (line 1510):
   $1 = nterm table_block (: )
   $2 = token "chain" (: )
   $3 = nterm chain_identifier (: )
   $4 = nterm chain_block_alloc (: )
   $5 = token '{' (: )
   $6 = nterm chain_block (: )
   $7 = token '}' (: )
   $8 = nterm stmt_separator (: )
-> $$ = nterm table_block (: )
Stack now 0 1 11 61 373 908
Entering state 1138
Reading a token: --(end of buffer or a NUL)
--accepting rule at line 216 ("}")
Next token is token '}' (: )
Shifting token '}' (: )
Entering state 1302
Reducing stack by rule 32 (line 918):
   $1 = token "table" (: )
   $2 = nterm table_spec (: )
   $3 = nterm table_block_alloc (: )
   $4 = token '{' (: )
   $5 = nterm table_block (: )
   $6 = token '}' (: )
-> $$ = nterm add_cmd (: )
Stack now 0 1
Entering state 47
Reducing stack by rule 16 (line 897):
   $1 = nterm add_cmd (: )
-> $$ = nterm base_cmd (: )
Stack now 0 1
Entering state 46
Reading a token: --accepting rule at line 647 ("
")
Next token is token "newline" (: )
Shifting token "newline" (: )
Entering state 4
Reducing stack by rule 3 (line 818):
   $1 = token "newline" (: )
-> $$ = nterm stmt_separator (: )
Stack now 0 1 46
Entering state 275
Reducing stack by rule 14 (line 876):
   $1 = nterm base_cmd (: )
   $2 = nterm stmt_separator (: )
-> $$ = nterm line (: )
Stack now 0 1
Entering state 45
Reducing stack by rule 2 (line 809):
   $1 = nterm input (: )
   $2 = nterm line (: )
-> $$ = nterm input (: )
Stack now 0
Entering state 1
Reading a token: --(end of buffer or a NUL)
--EOF (start condition 0)
Now at end of input.
Shifting token "end of file" (: )
Entering state 2
Stack now 0 1 2
Cleanup: popping token "end of file" (: )
Cleanup: popping nterm input (: )
----------------        ------------------
|  0000000020  |        | message length |
| 02576 | R--- |        |  type | flags  |
|  0000000000  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 00 00 00 00  |        |  extra header  |
----------------        ------------------
----------------        ------------------
|  0000000020  |        | message length |
| 02576 | R--- |        |  type | flags  |
|  0000000000  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 00 00 00 00  |        |  extra header  |
----------------        ------------------
/etc/fw/test.conf:1:1-2: Evaluate add
table ip6 nat {
^^


/etc/fw/test.conf:3:51-54: Evaluate value
                type nat hook prerouting priority -100; policy accept;
                                                  ^^^^
4294967196

/etc/fw/test.conf:3:64-69: Evaluate value
                type nat hook prerouting priority -100; policy accept;
                                                               ^^^^^^
1

/etc/fw/test.conf:7:46-48: Evaluate value
                type nat hook input priority 100; policy accept;
                                             ^^^
100

/etc/fw/test.conf:7:58-63: Evaluate value
                type nat hook input priority 100; policy accept;
                                                         ^^^^^^
1

/etc/fw/test.conf:11:47-50: Evaluate value
                type nat hook output priority -100; policy accept;
                                              ^^^^
4294967196

/etc/fw/test.conf:11:60-65: Evaluate value
                type nat hook output priority -100; policy accept;
                                                           ^^^^^^
1

/etc/fw/test.conf:15:52-54: Evaluate value
                type nat hook postrouting priority 100; policy accept;
                                                   ^^^
100

/etc/fw/test.conf:15:64-69: Evaluate value
                type nat hook postrouting priority 100; policy accept;
                                                               ^^^^^^
1

ip6 nat prerouting use 0 type nat hook prerouting prio -100 policy accept packets 0 bytes 0
ip6 nat input use 0 type nat hook input prio 100 policy accept packets 0 bytes 0
ip6 nat output use 0 type nat hook output prio -100 policy accept packets 0 bytes 0
ip6 nat postrouting use 0 type nat hook postrouting prio 100 policy accept packets 0 bytes 0
----------------        ------------------
|  0000000020  |        | message length |
| 00016 | R--- |        |  type | flags  |
|  0000000000  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 00 00 0a 00  |        |  extra header  |
----------------        ------------------
----------------        ------------------
|  0000000036  |        | message length |
| 02560 | R--- |        |  type | flags  |
|  0000000001  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 0a 00 00 00  |        |  extra header  |
|00008|--|00001|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
|00008|--|00002|        |len |flags| type|
| 00 00 00 00  |        |      data      |
----------------        ------------------
----------------        ------------------
|  0000000080  |        | message length |
| 02563 | R--- |        |  type | flags  |
|  0000000002  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 0a 00 00 00  |        |  extra header  |
|00008|--|00001|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
|00015|--|00003|        |len |flags| type|
| 70 72 65 72  |        |      data      |       p r e r
| 6f 75 74 69  |        |      data      |       o u t i
| 6e 67 00 00  |        |      data      |       n g
|00020|N-|00004|        |len |flags| type|
|00008|--|00001|        |len |flags| type|
| 00 00 00 00  |        |      data      |
|00008|--|00002|        |len |flags| type|
| ff ff ff 9c  |        |      data      |
|00008|--|00005|        |len |flags| type|
| 00 00 00 01  |        |      data      |
|00008|--|00007|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
----------------        ------------------
----------------        ------------------
|  0000000076  |        | message length |
| 02563 | R--- |        |  type | flags  |
|  0000000003  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 0a 00 00 00  |        |  extra header  |
|00008|--|00001|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
|00010|--|00003|        |len |flags| type|
| 69 6e 70 75  |        |      data      |       i n p u
| 74 00 00 00  |        |      data      |       t
|00020|N-|00004|        |len |flags| type|
|00008|--|00001|        |len |flags| type|
| 00 00 00 01  |        |      data      |
|00008|--|00002|        |len |flags| type|
| 00 00 00 64  |        |      data      |             d
|00008|--|00005|        |len |flags| type|
| 00 00 00 01  |        |      data      |
|00008|--|00007|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
----------------        ------------------
----------------        ------------------
|  0000000076  |        | message length |
| 02563 | R--- |        |  type | flags  |
|  0000000004  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 0a 00 00 00  |        |  extra header  |
|00008|--|00001|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
|00011|--|00003|        |len |flags| type|
| 6f 75 74 70  |        |      data      |       o u t p
| 75 74 00 00  |        |      data      |       u t
|00020|N-|00004|        |len |flags| type|
|00008|--|00001|        |len |flags| type|
| 00 00 00 03  |        |      data      |
|00008|--|00002|        |len |flags| type|
| ff ff ff 9c  |        |      data      |
|00008|--|00005|        |len |flags| type|
| 00 00 00 01  |        |      data      |
|00008|--|00007|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
----------------        ------------------
----------------        ------------------
|  0000000080  |        | message length |
| 02563 | R--- |        |  type | flags  |
|  0000000005  |        | sequence number|
|  0000000000  |        |     port ID    |
----------------        ------------------
| 0a 00 00 00  |        |  extra header  |
|00008|--|00001|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
|00016|--|00003|        |len |flags| type|
| 70 6f 73 74  |        |      data      |       p o s t
| 72 6f 75 74  |        |      data      |       r o u t
| 69 6e 67 00  |        |      data      |       i n g
|00020|N-|00004|        |len |flags| type|
|00008|--|00001|        |len |flags| type|
| 00 00 00 04  |        |      data      |
|00008|--|00002|        |len |flags| type|
| 00 00 00 64  |        |      data      |             d
|00008|--|00005|        |len |flags| type|
| 00 00 00 01  |        |      data      |
|00008|--|00007|        |len |flags| type|
| 6e 61 74 00  |        |      data      |       n a t
----------------        ------------------
/etc/fw/test.conf:2:15-24: Error: Could not process rule: No such file or directory
        chain prerouting {
              ^^^^^^^^^^
/etc/fw/test.conf:6:15-19: Error: Could not process rule: No such file or directory
        chain input {
              ^^^^^
/etc/fw/test.conf:10:15-20: Error: Could not process rule: No such file or directory
        chain output {
              ^^^^^^
/etc/fw/test.conf:14:15-25: Error: Could not process rule: No such file or directory
        chain postrouting {
              ^^^^^^^^^^^

Attachment: OpenPGP_0xF4F735931F05C5CE.asc
Description: application/pgp-keys

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux