[Bug 1422] iptables-nft fails to check / delete rules in raw table

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1422

--- Comment #1 from Etienne Champetier <champetier.etienne at gmail.com> ---

Here the nft output
# nft -s list ruleset
table ip raw {
    chain PREROUTING {
        type filter hook prerouting priority raw; policy accept;
    }

    chain OUTPUT {
        type filter hook output priority raw; policy accept;
        meta l4proto udp ip daddr 169.254.25.10 udp dport 53 counter # NOTRACK
    }
}


# nft add rule raw OUTPUT tcp dport 42 notrack
# nft -s list ruleset
table ip raw {
    chain PREROUTING {
        type filter hook prerouting priority raw; policy accept;
    }

    chain OUTPUT {
        type filter hook output priority raw; policy accept;
        meta l4proto udp ip daddr 169.254.25.10 udp dport 53 counter # NOTRACK
        tcp dport 42 notrack
    }
}

So the rule inserted by iptables-nft is wrong it seems

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200415/0309189f/attachment.html>