[Bug 1202] New: Cannot match on both dport and sport in one nftables rule

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1202

            Bug ID: 1202
           Summary: Cannot match on both dport and sport in one nftables
                    rule
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: jac_linux at yahoo.com

In nftables v0.5 I could have the following rule to match on EITHER sport or
dport in the same rule:
tcp sport ssh tcp dport ssh counter accept

In nftables v0.7 this no longer works.
I can add the rule, but it won't match a packet.
If the packet has dport = ssh, it won't match, unless I create a SEPARATE rule
with just dport:

tcp dport ssh counter accept
tcp sport ssh counter accept

Is this a bug (I didn't see anything regarding this in the v0.8 bug list) or
are dport/sport in same rule no longer allowed?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20171113/6f16992e/attachment.html>