[Bug 1414] Using ip6 daddr in nat input chain is rejected with an incorrect error

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1414

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
(In reply to Avamander from comment #0)
> nft version: nftables v0.9.2 (Scram)
> 
> Example config:
> ```
> table ip nat {

Table is 'ip', use 'ip6' instead (or 'inet' if you want a dual ip/ip6 table)

>         chain input {
>                 type nat hook input priority 0;
>                 ip6 daddr ::1/128 accept;
>         }
> }
> ```
> 
> Error:
> ```
> /etc/nftables.conf:186:3-11: Error: conflicting protocols specified: ip vs.
> ip6
>                 ip6 daddr ::1/128 accept;
>                 ^^^^^^^^^

This example uses 'ip6', hence the error.

> ```
> 
> It should output a reasonable error.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200326/b6342ba0/attachment.html>