On Tue, Jul 27, 2021 at 10:52:39PM +0800, Tom Yan wrote:
> Just noticed something that is even worse:
>
> # nft add rule meh tcp_flags 'tcp flags { fin, rst, ack }'
> # nft add rule meh tcp_flags 'tcp flags == { fin, rst, ack }'
> # nft add rule meh tcp_flags 'tcp flags & ( fin | rst | ack ) != 0'
> # nft add rule meh tcp_flags 'tcp flags & ( fin | rst | ack ) == 0'
> # nft list table meh
> table ip meh {
> chain tcp_flags {
> tcp flags { fin, rst, ack }
> tcp flags { fin, rst, ack }
> tcp flags fin,rst,ack
> tcp flags ! fin,rst,ack
> }
> }
Could you develop the issue you're seeing here?
