[Bug 1700] Flowtable - Bug on devices deinition

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Aug 22 19:15:16 CEST 2023


https://bugzilla.netfilter.org/show_bug.cgi?id=1700

--- Comment #2 from Pablo Neira Ayuso <pablo at netfilter.org> ---
You have to narrow down this rule to what flows get into the flowtable:

 iifname { eth1, eth2 } ip protocol udp counter packets 1385097903 bytes
2077646854500 flow add @ft_test03

in case you want flowtable coming from from eth1 and eth2.

*Your ruleset determines what flows get added to the flowtable*.

This flowtable in the example below specify no devices:

 table ip vyos_filter {
    flowtable ft_test03 {
        hook ingress priority filter
    }

The devices you specify in the flowtable declaration determine from what device
the flowtable look up is done.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230822/36e7b605/attachment.html>


More information about the netfilter-buglog mailing list