On Tue, Oct 8, 2024, at 12:59, Robin Bussell wrote: > Hi Folks, > I'm trying to create a regular chain with a default drop > policy and not getting anywhere. The wiki implies this can be done, but > when I try: > > nft 'add chain ip myTable myChain { policy drop ;}' > > I get back: > > Error: Could not process rule: Operation not supported > add chain ip O365 O365WhiteList { policy drop ;} > ^^^^^^^^^^^ > > ( those carets line up with the "policy drop" on my terminal. A table > called myTable of the ip family exists already ) > > So are policies actually supported on regular chains? If so, can you > tell me what might be wrong with my nft invocation? I don't think they are, they are only supported in hook chains. Which part of the wiki implies otherwise?