[Bug 1310] New: syntax issue with tproxy

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1310

            Bug ID: 1310
           Summary: syntax issue with tproxy
           Product: nftables
           Version: unspecified
          Hardware: All
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: arturo at debian.org

Not sure if really a syntax issue or a documentation issue.

Original Debian bug: https://bugs.debian.org/916863


>>
>> # nft add rule inet filter divert 'ip6 daddr ::/0 meta l4proto tcp tproxy to :2000 meta mark set 1 accept'
>> Error: syntax error, unexpected to
>> add rule inet filter divert ip6 daddr ::/0 meta l4proto tcp tproxy to :2000 meta mark set 1 accept
>>                                                                    ^^
>>
>> RedHats have the same problem: https://bugzilla.redhat.com/show_bug.cgi?id=1651813
>>
>
> This may be a bug in the documentation.
>
> Try something like:
>
>  * tproxy ip to 192.0.2.1
>  * tproxy ip6 to [2001:db8::1]:50080

It accepts an address, but then barfs at anything further, even EOL.

# nft add rule inet filter divert 'ip6 daddr ::/0 meta l4proto tcp tproxy ip6
[::1]'
Error: syntax error, unexpected newline
add rule inet filter divert ip6 daddr ::/0 meta l4proto tcp tproxy ip6 [::1]
                                                                            ^

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20181219/b484d7d6/attachment.html>