[Bug 1422] iptables-nft raw notrack rules are wrong

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1422

--- Comment #8 from Etienne Champetier <champetier.etienne at gmail.com> ---
Yup, nft is loading libs from /usr/lib/x86_64-linux-gnu/xtables/, I'll rebuild
things until it works !

Can you confirm that you can check/delete, as this was my initial problem
iptables-nft -t raw -I OUTPUT -p udp -d 169.254.25.10 --dport 53 -j NOTRACK &&
echo 1
iptables-nft -t raw -C OUTPUT -p udp -d 169.254.25.10 --dport 53 -j NOTRACK &&
echo 2
iptables-nft -t raw -D OUTPUT -p udp -d 169.254.25.10 --dport 53 -j NOTRACK &&
echo 3

Same with
iptables-nft -t raw -I OUTPUT -p udp -d 169.254.25.10 --dport 53 -j CT
--notrack && echo 4
iptables-nft -t raw -C OUTPUT -p udp -d 169.254.25.10 --dport 53 -j CT
--notrack && echo 5
iptables-nft -t raw -D OUTPUT -p udp -d 169.254.25.10 --dport 53 -j CT
--notrack && echo 6

Thanks a lot

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200415/3c4818e6/attachment.html>