[Bug 1442] New: Definitions cannot be referenced in chain type configuration

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu Jul 16 13:21:33 CEST 2020


https://bugzilla.netfilter.org/show_bug.cgi?id=1442

            Bug ID: 1442
           Summary: Definitions cannot be referenced in chain type
                    configuration
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: Ubuntu
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: phillc at gmail.com

I've looked through the documentation, and through previous bugs to attempt to
establish if this is a bug, not a feature, or just WAD but haven't been able to
find much info.

Having set interface definitions at the top of nftables.conf

define $if_main = ens33

The definition works fine in subsequent rule configuration, but does not work
in chain type definitions.

I am attempting to introduce configuration portability for an ingress hook
chain by doing this:

table netdev filter {
    chain Main_Ingress {
        type filter hook ingress device $if_main priority -500; policy accept;
    }

However I get "Error: syntax error, unexpected '$', expecting string or quoted
string or string with a trailing asterisk".


OS: Ubuntu 20.04 kernel 5.4.0-40-generic
nftables/focal 0.9.3-2 via apt package

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200716/2ed263f0/attachment.html>


More information about the netfilter-buglog mailing list