<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Queue verdict cannot be used in vmap"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1455">1455</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Queue verdict cannot be used in vmap
</td>
</tr>
<tr>
<th>Product</th>
<td>nftables
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>arm
</td>
</tr>
<tr>
<th>OS</th>
<td>Ubuntu
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>nft
</td>
</tr>
<tr>
<th>Assignee</th>
<td>pablo@netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>phillc@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>I'm not sure if this is a bug, not implemented, or as designed.
I am trying to use a vmap to direct traffic to NFQueue when specific criteria
are matched.
The map has been defined and a rule using it:
table ip filter {
map AppControl_TCP {
type ipv4_addr . ipv4_addr . inet_service : verdict
}
chain Forward {
type filter hook forward priority filter; policy drop;
ip saddr . ip daddr . tcp dport vmap @AppControl_TCP
}
...
}
But I cannot assign the verdict "queue num 3" to the map. The following error
is returned when importing the ruleset with nft -f.
"
nft-map-appcontrol-tcp.conf:2:66-70: Error: syntax error, unexpected queue
add element ip filter AppControl_TCP {10.1.1.1 . 10.1.1.100 . 502 : queue num
3} ^^^^^
"
I have worked around this for now by using 'goto AppControl' as the vmap
verdict and then adding "queue num 3" as the only rule in the chain
'AppControl'. It would be great if the queue verdict would work in the vmap
though.
Thanks
--------------------------------------------
OS: Ubuntu 20.04
Kernel: Ubuntu 5.4.0-1015.15-raspi 5.4.44
nftables/focal,now 0.9.3-2 arm64</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>