<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - "map" doesn't work as expected"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1489#c4">Comment # 4</a>
on <a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - "map" doesn't work as expected"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1489">bug 1489</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to Alexander.S from <a href="show_bug.cgi?id=1489#c3">comment #3</a>)
<span class="quote">> Thank you!
>
> But one more thing.
> Currently, instead of:
>
> add rule ip mangle manout ct direction reply mark set ct original _ip_ daddr
> map { $ext1_ip : 0x11, $ext2_ip : 0x12 }
>
> I use:
>
> add rule ip mangle manout ct direction reply ct original daddr $ext1_ip mark
> set 0x11
> add rule ip mangle manout ct direction reply ct original daddr $ext2_ip mark
> set 0x12
>
> and it works without "ip".</span >
Yes, it's the legacy syntax which cannot be used with set/map/concatenation.
It only works in simple rules like the one above, but for more complex
operations, nft needs the "ip" prefix.
<span class="quote">> In
> "<a href="https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference">https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference</a>-
> nftables_in_10_minutes#Ct" examples are also without "ip".</span >
Thanks for spotting this, I have just updated the wiki.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>