[Bug 1721] New: nft list ruleset does not list symhash after tproxy target

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu Nov 2 10:14:54 CET 2023


https://bugzilla.netfilter.org/show_bug.cgi?id=1721

            Bug ID: 1721
           Summary: nft list ruleset does not list symhash after tproxy
                    target
           Product: nftables
           Version: 1.0.x
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: mydexterid at gmail.com

Hi!

I've just compiled nft from source (to check whether this has been already
fixed), and with current master (65d94af52f11a2c5a44d5ae8aa3891ccb648c666) this
is still an issue.

Adding a rule like this:
nft add rule inet vela whatever ct mark and 3221291007 == 3221250109 meta
nfproto ipv4 meta l4proto tcp counter tproxy ip to 127.0.0.1 : symhash mod 1
map { 0 : 36993, } comment "blabla"

then listing it with nft list ruleset, only shows up until the symhash part:
nft list ruleset
chain whatever {
        ct mark & 0xc000ffff == 0xc000603d meta nfproto ipv4 meta l4proto tcp
counter packets 0 bytes 0 tproxy ip to 127.0.0.1 comment "blabla"
    }

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20231102/befc458e/attachment.html>


More information about the netfilter-buglog mailing list