[Bug 1473] New: [log] not printing in combination with ct state and set update a/o rate limit

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Sep 25 14:09:34 CEST 2020


https://bugzilla.netfilter.org/show_bug.cgi?id=1473

            Bug ID: 1473
           Summary: [log] not printing in combination with ct state and
                    set update a/o rate limit
           Product: nftables
           Version: unspecified
          Hardware: arm
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com

kernel 5.9.0-rc6 armv7l | nft 0.9.6 
____

works (as in printing log):

ct state != { 2,4 } log flags all prefix "foo DROP: " drop;

not printing log:

ct state != { 2,4 } update @foo { ip6 saddr limit rate over 500/second burst 25
packets } log flags all prefix "foo DROP: " drop;

monitoring the set foo it is apparent that elements being updated and the rule
works for that portion however log is not being printed which inhibits
debugging.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200925/31cbaf41/attachment.html>


More information about the netfilter-buglog mailing list