[Bug 1172] New: chain priority cannot be set by a defined variable

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1172

            Bug ID: 1172
           Summary: chain priority cannot be set by a defined variable
           Product: nftables
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: netfilter at allycomm.com

To Replicate:

* Create an nft file that contains

define PRI_FILTER    =     0
table inet global {
    chain prerouting {
        type filter hook prerouting priority $PRI_FILTER
        policy drop
}

* "execute" using nft -f <that_file>

Observed Behavior:

tmp:4:46-46: Error: syntax error, unexpected '$', expecting - or number
        type filter hook prerouting priority $PRI_FILTER
                                             ^

Expected Behavior:

priority would be 0


Impact:

For multi-part rule sets, being able to centrally manage the order of execution
is critical for ensuring robustness and correctness. Needing to manage a set of
priorities across not only multiple chains, but also multiple files is error
prone.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170821/5ead04b5/attachment.html>