[Bug 1465] New: [vmap] ct state concatenation not working

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Sep 23 11:46:29 CEST 2020


https://bugzilla.netfilter.org/show_bug.cgi?id=1465

            Bug ID: 1465
           Summary: [vmap] ct state concatenation not working
           Product: nftables
           Version: unspecified
          Hardware: All
                OS: Debian GNU/Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com

kernel 5.9.0-rc6 armv7l | nft 0.9.6 

works:

ct state vmap { 1: drop, 2: accept, 4: accept }


not working:

ct state vmap { 1: drop, 2 . 4: accept }

Error: Can't parse symbolic invalid expressions

and neither:

ct state vmap { 1: drop, 2 and 4: accept }
ct state vmap { 1: drop, 2 & 4: accept }

where nft list ruleset then prints:

ct state vmap { 0x0 : accept, invalid : drop }

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200923/203e1792/attachment.html>


More information about the netfilter-buglog mailing list