[Bug 1281] New: Using kernel 4.18.10, nft commandline tool or nft -f can't parse negative priority values over -200.

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1281

            Bug ID: 1281
           Summary: Using kernel 4.18.10, nft commandline tool or nft -f
                    can't parse negative priority values over -200.
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: Ubuntu
            Status: NEW
          Severity: critical
          Priority: P5
         Component: kernel
          Assignee: pablo at netfilter.org
          Reporter: seungheon_jang at tmax.co.kr

Hi. I'm using OS 'Ubuntu 18.04'. The kernel version is '4.18.10'.
And nft version is 'nftables v0.9.0 (Fearless Fosdick)'
I installed these packages.
libjansson4_2.11-1_amd64.deb
libnftnl7_1.1.1-1_amd64.deb
libnftables0_0..9.0-1_amd64.deb
nftables_0.9.0-1_amd64.deb
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I want to use nft -f command for enrolling rule.
This is my rule.
--------------------------------------------------------------------
table ip testbed_nat {
    chain preroutingnat_200 {
        type nat hook prerouting priority -300; policy accept;
    }
    chain postroutingnat_200 {
        type nat hook postrouting priority -300; policy accept;
    }
}
--------------------------------------------------------------------

But, the result of nft -f command is this.
~# nft -f rule
rule:4:15-31: Error: Could not process rule: Operation not supported
        chain preroutingnat_200 {
              ^^^^^^^^^^^^^^^^^
rule:10:15-32: Error: Could not process rule: Operation not supported
        chain postroutingnat_200 {
              ^^^^^^^^^^^^^^^^^^

I changed priority value -300 -> -199, it worked. But i changed value over
-200, it didn't work.
And I changed kernel version 4.18.10 to 4.15 or 4.13, then it worked.

I want to use nft in kernel that version is 4.18.10 

Please look into this issue.
Thanks.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20181004/d680c5f5/attachment.html>