[Bug 1196] nft does not allow comments within sets: Error: syntax error, unexpected newline

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Aug 27 20:09:59 CEST 2019


https://bugzilla.netfilter.org/show_bug.cgi?id=1196

Arturo Borrero Gonzalez <arturo at debian.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |arturo at debian.org

--- Comment #3 from Arturo Borrero Gonzalez <arturo at debian.org> ---
Additional information reported in Debian bug tracker:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932877


    # cat tmp.nft
    table inet x {
        # comments are allowed here
        chain y {
            # comments are allowed here
            icmpv6 type {
                1,                  # comments are allowed here
                2,
            } accept

            icmpv6 type {
                1,
                # comments AREN'T allowed here
                2,
            } accept
        }
    }
    list ruleset

    root at not-omega:~# nft --file tmp.nft
    tmp.nft:12:43-43: Error: syntax error, unexpected newline, expecting comma
or '}'
                # comments AREN'T allowed here
                                              ^
    tmp.nft:13:14-14: Error: syntax error, unexpected comma
                2,
                 ^
    tmp.nft:14:11-16: Error: syntax error, unexpected accept, expecting newline
or semicolon
            } accept
              ^^^^^^

PS: it also doesn't allow blank lines, e.g.

    add table x
    add chain x y
    add rule x y ip saddr {
        1,

        2,
    } accept

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190827/00a78f0f/attachment.html>


More information about the netfilter-buglog mailing list