[Bug 1327] Cannot use (empty) named set for matching IPv4 networks

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1327

--- Comment #1 from Sven Strickroth <email at cs-ware.de> ---
Short addition: if the named set is not empty it works:
nft> list ruleset
table inet filter {
        set blocklistssh4 {
                type ipv4_addr
                elements = { 192.168.178.0, 192.168.179.0 }
        }

        chain blocklistssh {
        }
}
nft> add rule inet filter blocklistssh ip saddr & 255.0.0.0 @blocklistssh4 drop
nft> list ruleset
table inet filter {
        set blocklistssh4 {
                type ipv4_addr
                elements = { 192.168.178.0, 192.168.179.0 }
        }

        chain blocklistssh {
                ip saddr @blocklistssh4/8 drop
        }
}

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190324/d8f2f9d9/attachment.html>