<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - add set - syntax has changed - update documentation"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1299#c5">Comment # 5</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - add set - syntax has changed - update documentation"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1299">bug 1299</a>
from <span class="vcard"><a class="email" href="mailto:james@nurealm.net" title="James Feeney <james@nurealm.net>"> <span class="fn">James Feeney</span></a>
</span></b>
<pre>BTW, from the man page, "If an identifier is specified without an address
family, the ip family is used by default."
It seems that I did not appreciate the importance of this, where, then, every
reference to "<address_family> <arbitrary_table_name> <arbitrary_set_name>" is,
implicitly "ip <arbitrary_table_name> <arbitrary_set_name>", when the address
family is not stated explicitly.
The implicit address family "ip" doesn't seem important without first
understanding and appreciating that the table names are unique to each address
family. Again, please please give additional emphasis to this point in the
documentation.
<span class="quote">> I would very much like to enforce family, but it might break existing scripts.</span >
You understand that I *literally* did not understand what you were talking
about when you first said "This is short for 'nft add set ip filter'", even
though the meaning is obvious in retrospect, yes?
I, then, want to encourage everyone to move to enforcing the use of address
family in the nft commands, and, yes, break those scripts. Now is a good time
to fix nft scripts, while so many people are still using iptables.
Thanks for helping me to clarify these issues.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>