[Bug 1032] nftables-0.5 fails to import ip6 tables when loopback address provided as both src and dst addr

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Apr 15 13:41:03 CEST 2016


https://bugzilla.netfilter.org/show_bug.cgi?id=1032

Arturo Borrero Gonzalez <arturo.borrero.glez at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |arturo.borrero.glez at gmail.c
                   |                            |om

--- Comment #1 from Arturo Borrero Gonzalez <arturo.borrero.glez at gmail.com> ---
I think this problems has nothing to do with loopback addresses, it seems to be
with the netlink code generation:

nft add rule ip6 t c ip6 saddr ::1 ip6 daddr ::2 --debug=netlink
ip6 t c 
  [ payload load 32b @ network header + 8 => reg 1 ]
  [ cmp eq reg 1 0x00000000 0x00000000 0x00000000 0x01000000 0x00000000
0x00000000 0x00000000 0x02000000 ]

<cmdline>:1:1-44: Error: Could not process rule: Value too large for defined
data type
add rule ip6 t c ip6 saddr ::1 ip6 daddr ::2
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160415/d5a52d9f/attachment.html>


More information about the netfilter-buglog mailing list