[Bug 1140] nft dump invalid (flow table)

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1140

Karel Rericha <karel at unitednetworks.cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |karel at unitednetworks.cz

--- Comment #5 from Karel Rericha <karel at unitednetworks.cz> ---
Hi Andreas,

I would suggest using stateful objects for now, which works (v0.8, kernel
4.13.7):

nft add counter x c-echo-reply
nft add rule x y ip protocol icmp counter name icmp type map { echo-reply:
"c-echo-reply" }

Of course add counters for other types of icmp messages as needed.

Karel

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20171017/6c39abbc/attachment.html>