Re: IPv4 Evil Bit

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 8 Jun 2023 09:58:39 +0200
Marek Küthe <m-k-mailling-list@xxxxxxx> wrote:

> On Wed, 7 Jun 2023 10:38:23 -0400
> Paul Robert Marino <prmarino1@xxxxxxxxx> wrote:
> 
> > Answering the first question i think you may be looking for sets
> > https://wiki.nftables.org/wiki-nftables/index.php/Sets
> 
> Thanks for the answer. Is there a possibility to combine sets (i.e. to
> perform a kind of merge)?
> iifname @dnet_interfaces oifname {
> @client_interfaces, @dnet_interfaces } goto dnet_forward;

Named sets cannot be aggregated. This can only be accomplished with symbolic variables those values define anonymous sets. See https://bugzilla.netfilter.org/show_bug.cgi?id=1539#c6 for an example.

-- 
Kerin Millar




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux