Re: Is it possible to change a chains default policy when rules are already present?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Le 14/08/2020 à 15:44, Andreas Hoefler a écrit :
Andreas Hoefler <andreas.hoefler@xxxxxxxxxxxxxxxxxxxxxx> wrote:
Daniel <tech@xxxxxxxxxx> wrote:
dh@peech:~$ sudo nft add chain ip6 mangle prerouting "{ type nat
hook prerouting priority -350 ; policy accept ; }"
Error: Could not process rule: Operation not supported add chain
ip6 mangle prerouting { type nat hook prerouting priority -350;
policy accept; }
Historic artifact, try a value larger than -200, e.g. -199.
I've sent a patch to zap this outdated check.
Didn't work for me either:
#nft add chain ip6 x y {type filter hook input priority \-100\;}
nft: invalid option -- '1'
Different problem.  Just follow Daniels example and quote everything, i.e.  nft add chain ip6 x y "{ type filter hook input priority -100; }"
ah ok that did the trick, thx a lot.
Confirmed, thanks.

--
Daniel Huhardeaux
+33.368460088@xxxxxxxxxx	      sip:820@xxxxxxxxxxxxxx
+41.445532125@xxxxxxxxxxxxxx		    tootaiNET



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux