RE: Is it possible to change a chains default policy when rules are already present?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Andreas Hoefler <andreas.hoefler@xxxxxxxxxxxxxxxxxxxxxx> wrote:
> > > Daniel <tech@xxxxxxxxxx> wrote:
> > > > dh@peech:~$ sudo nft add chain ip6 mangle prerouting "{ type nat 
> > > > hook prerouting priority -350 ; policy accept ; }"
> > > > Error: Could not process rule: Operation not supported add chain 
> > > > ip6 mangle prerouting { type nat hook prerouting priority -350; 
> > > > policy accept; }
> > >
> > > Historic artifact, try a value larger than -200, e.g. -199.
> > > I've sent a patch to zap this outdated check.
> >
> > Didn't work for me either:
> > #nft add chain ip6 x y {type filter hook input priority \-100\;}
> > nft: invalid option -- '1'
> 
> Different problem.  Just follow Daniels example and quote everything, i.e.  nft add chain ip6 x y "{ type filter hook input priority -100; }"

ah ok that did the trick, thx a lot.

Andy




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux