[Bug 923] New: set: It Is not possible invert a set

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed May 7 09:22:29 CEST 2014


https://bugzilla.netfilter.org/show_bug.cgi?id=923

           Summary: set: It Is not possible invert a set
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey at gmail.com
   Estimated Hours: 0.0


It Is not possible invert a set. Here an example of this bug.

$ sudo nft add rule ip test input tcp sport != { 22, 53, 80, 110 } counter
BUG: invalid expression type set
nft: src/evaluate.c:975: expr_evaluate_relational: Assertion `0' failed.

The last commit in Pablo git tree of kernel is "40e6442 netfilter: x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list