[Bug 1299] New: add set - syntax has changed - update documentation

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Nov 16 19:43:50 CET 2018


https://bugzilla.netfilter.org/show_bug.cgi?id=1299

            Bug ID: 1299
           Summary: add set - syntax has changed - update documentation
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: james at nurealm.net

Arch Linux
nftables 1:0.9.0-1

On the wiki:
https://wiki.nftables.org/wiki-nftables/index.php/Sets

the example is shown:

% nft add set filter blackhole { type ipv4_addr\;}

where man 8 nft shows:

add set [family] table set { type type ; ... }

the "family" is shown as optional.

"family" no longer appears to be optional.  Is this intentional?  Or a bug?

$ sudo nft list tables
table inet filter
table ip nat
table ip private

$ sudo nft add set filter foreign \{ type ipv4_addr \; \}
Error: Could not process rule: No such file or directory
add set filter foreign { type ipv4_addr ; }
        ^^^^^^

But instead,

$ sudo nft add set inet filter foreign \{ type ipv4_addr \; \}

will successfully create the set:

$ sudo nft list ruleset
table inet filter {
        set foreign {
                type ipv4_addr
        }
...

If not a bug, then erroneous documentation is very much a problem.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20181116/315f3995/attachment.html>


More information about the netfilter-buglog mailing list