Le 30/01/2024 à 13:13, Daniel a écrit :
Le 30/01/2024 à 11:39, Kerin Millar a écrit :
On Tue, 30 Jan 2024, at 10:17 AM, Daniel wrote:
Hi,
nft 1.06 Debian12. Is it possible in a set to combine ipv4 and ipv6 ? If
not, does it exist another method to do this ?
Combining is impossible. However, the value of an ipv6_addr element is
permitted to be an IPv4-mapped IPv6 address.
As simple it is, thanks.
I have a question: if I want to check a source ipv4 address against a
mapped ipv4, how to configure the rule ? I get a datatype mismatch as
the set is of type addr_ipv6
add rule inet filter input ip saddr @reaction-banned-ips drop is not
accepted.