[Bug 925] New: icmp: ICMPv4 types are not supported

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed May 7 09:26:07 CEST 2014


https://bugzilla.netfilter.org/show_bug.cgi?id=925

           Summary: icmp: ICMPv4 types are not supported
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey at gmail.com
   Estimated Hours: 0.0


The following icmp v4 types are not supported in nft (but these is suppported
in iptables)

Valid ICMP Types in iptables    => Valid ICMP Type in nftables.
any
echo-reply (pong)         => echo-reply in nft
destination-unreachable        => destination-unreachable in nft
   network-unreachable
   host-unreachable
   protocol-unreachable
   port-unreachable
   fragmentation-needed
   source-route-failed
   network-unknown
   host-unknown
   network-prohibited
   host-prohibited
   TOS-network-unreachable
   TOS-host-unreachable
   communication-prohibited
   host-precedence-violation
   precedence-cutoff
source-quench            => source-quench in nft
redirect            => redirect in nft
   network-redirect
   host-redirect
   TOS-network-redirect
   TOS-host-redirect
echo-request (ping)        => echo-request in nft
router-advertisement
router-solicitation
time-exceeded (ttl-exceeded)    => time-exceeded in nft
   ttl-zero-during-transit
   ttl-zero-during-reassembly
parameter-problem        => parameter-problem in nft
   ip-header-bad
   required-option-missing
timestamp-request        => timestamp-request in nft
timestamp-reply            => timestamp-reply in nft
address-mask-request        => address-mask-request  in nft    
address-mask-reply        => address-mask-reply in nft


The last commit in Pablo git tree of kernel is "40e6442 netfilter: x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list