From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Anders K. Pedersen | Cohaesio" Subject: Re: nftables rules not matching after upgrading from 0.7 to 0.8 Date: Wed, 25 Oct 2017 22:22:13 +0000 Message-ID: <1508970133.25035.24.camel@cohaesio.com> References: <1508949114.1154.14.camel@cohaesio.com> <20171025175725.GJ19457@breakpoint.cc> <1508955630.25035.13.camel@cohaesio.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Cc: "netfilter-devel@vger.kernel.org" To: "fw@strlen.de" Return-path: Received: from bender.cohaesio.com ([212.97.128.130]:59801 "EHLO mail.cohaesio.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751421AbdJYWYg (ORCPT ); Wed, 25 Oct 2017 18:24:36 -0400 In-Reply-To: <1508955630.25035.13.camel@cohaesio.com> Content-Language: en-US Content-ID: <78D3849AE65B914DAE1C1E43E16D413A@surftown.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: T24gb25zLCAyMDE3LTEwLTI1IGF0IDIwOjIwICswMjAwLCBBbmRlcnMgSy4gUGVkZXJzZW4gfCBD b2hhZXNpbyB3cm90ZToNCj4gT24gb25zLCAyMDE3LTEwLTI1IGF0IDE5OjU3ICswMjAwLCBGbG9y aWFuIFdlc3RwaGFsIHdyb3RlOg0KPiA+IEFuZGVycyBLLiBQZWRlcnNlbiB8IENvaGFlc2lvIDxh a3BAY29oYWVzaW8uY29tPiB3cm90ZToNCj4gPiA+IEFmdGVyIHVwZ3JhZGluZyB0byBuZnRhYmxl cyAwLjggKGZyb20gMC43KSBvbiBvbmUgb2YgbXkgc3lzdGVtcywNCj4gPiA+IEkndmUNCj4gPiA+ IGV4cGVyaWVuY2VzIHNldmVyYWwgY2FzZXMgd2hlcmUgcnVsZXMgdGhhdCB1c2VkIHRvIHdvcmsg ZmluZSB3aXRoDQo+ID4gPiAwLjcNCj4gPiA+IHNvbWV0aW1lcyBkb2Vzbid0IG1hdGNoIGFueW1v cmUgd2l0aCAwLjggKGl0J3Mgbm90IGNvbnNpc3RlbnQgLQ0KPiA+ID4gc29tZXRpbWVzIHRoZSBy dWxlcyBkbyBtYXRjaCB3aXRoIDAuOCkuDQo+ID4gPiANCj4gPiA+IFRoZSBydWxlIGNoYWlucyBl bmQgd2l0aCBhIGxvZyBzdGF0ZW1lbnQgYmVmb3JlIHJlamVjdGluZyBvcg0KPiA+ID4gZHJvcHBp bmcNCj4gPiA+IHRoZSBwYWNrZXRzLCBhbmQgSSBjYW4gc2VlIGluIHRoZSBsb2cgdGhhdCBldmVy eXRoaW5nIGlzIGFzDQo+ID4gPiBleHBlY3RlZA0KPiA+ID4gYW5kIHRoZSBydWxlcyBzaG91bGQg bWF0Y2guIEFmdGVyIGRvd25ncmFkaW5nIHRvIG5mdGFibGVzIDAuNw0KPiA+ID4gZXZlcnl0aGlu ZyB3b3JrcyBhZ2Fpbi4NCj4gPiANCj4gPiBBcmUgdGhvc2UgZXJyb3JzIHJlc3RyaWN0ZWQgdG8g YSBwYXJ0aWN1bGFyIHRhYmxlIGZhbWlseSwgY2hhaW4gb3INCj4gPiBwcm90b2NvbD8NCj4gDQo+ IFNvIGZhciBJJ3ZlIG9ubHkgcmVnaXN0ZXJlZCBpdCBmb3IgSVB2NCBpbnB1dCBmaWx0ZXJpbmcg Zm9yIFRDUCwgYnV0DQo+IHRoYXQncyBhbHNvIG1vc3Qgb2YgdGhlIHRyYWZmaWMgb24gdGhpcyBz eXN0ZW0sIHNvIEknbSBub3Qgc3VyZSB0aGF0DQo+IGl0J3MgbGltaXRlZCB0byB0aGF0Lg0KPiAN Cj4gQXMgbWVudGlvbmVkLCBpdCdzIG5vdCBjb25zaXN0ZW50LiBBIHJ1bGUgdGhhdCBoYXMgd29y a2VkIGZpbmUgY291bGQNCj4gc3VkZGVubHkgc3RvcCB3b3JraW5nIHdpdGhvdXQgYW55IHJ1bGUg c2V0IGNoYW5nZXMgZm9yIGRheXMuIFNvbWUNCj4gdGltZXMNCj4gaXQgaGFzIGhlbHBlZCB0byBq dXN0IHJlbG9hZCB0aGUgZXhhY3Qgc2FtZSBydWxlIHNldC4gT3RoZXIgdGltZXMNCj4gY2hhbmdp bmcNCj4gDQo+IHRjcCBkcG9ydCB7IGltYXAyLCBpbWFwcyB9IGZsb3cgdGFibGUgaW1hcCBcDQo+ ICAgICAgICAgICAgICAgICB7IGlwIHNhZGRyICYgMjU1LjI1NS4yNTUuMjQwIFwNCj4gICAgICAg ICAgICAgICAgICAgdGltZW91dCA1bSBsaW1pdCByYXRlIDEwL21pbnV0ZSB9IFwNCj4gICAgICAg ICBjb3VudGVyIGFjY2VwdA0KPiANCj4gdG8NCj4gDQo+IHRjcCBkcG9ydCB7IGltYXAyLCBpbWFw cyB9IGZsb3cgdGFibGUgaW1hcCBcDQo+ICAgICAgICAgY291bnRlciBhY2NlcHQNCj4gDQo+IG9y DQo+IA0KPiB0Y3AgZHBvcnQgeyBkb21haW4sIGh0dHAsIGh0dHBzLCA4MDgwLCA4NDQzLCA5MDkx IH0gXA0KPiAgICAgICAgIG1ldGEgaWlmIGV0aDEgYWNjZXB0DQo+IA0KPiB0bw0KPiANCj4gdGNw IGRwb3J0IHsgZG9tYWluLCBodHRwLCBodHRwcywgODA4MCwgODQ0MywgOTA5MSB9IFwNCj4gICAg ICAgICBtZXRhIGlpZiBldGgxIGNvdW50ZXIgYWNjZXB0DQo+IA0KPiBoYXMgcmVzb2x2ZWQgaXQs IGJ1dCBpdCBmZWVscyBsaWtlIGl0IHdhc24ndCByZWFsbHkgZHVlIHRvIHRoZQ0KPiBjaGFuZ2Vz LA0KPiBidXQgbW9yZSByYW5kb20gbHVjay4NCj4gDQo+ID4gQXQgbGVhc3QgZm9yIGlwIGZhbWls eSBhbGwgcGFja2V0cyB3aWxsIGhhdmUgcGt0LT50cHJvdF9zZXQgdHJ1ZSwNCj4gPiBzbyBJIGRv bid0IHNlZSBob3cgbWV0YSB3b3VsZCBicmVhayB0aGVyZS4NCj4gPiANCj4gPiA+ICBpcCBmaWx0 ZXIgaW5wdXQgDQo+ID4gPiAtICBbIHBheWxvYWQgbG9hZCAxYiBAIG5ldHdvcmsgaGVhZGVyICsg OSA9PiByZWcgMSBdDQo+ID4gPiArICBbIG1ldGEgbG9hZCBsNHByb3RvID0+IHJlZyAxIF0NCj4g PiA+IA0KPiA+ID4gYW5kDQo+ID4gPiANCj4gPiA+ICBpcDYgZmlsdGVyIGlucHV0IA0KPiA+ID4g LSAgWyBwYXlsb2FkIGxvYWQgMWIgQCBuZXR3b3JrIGhlYWRlciArIDYgPT4gcmVnIDEgXQ0KPiA+ ID4gKyAgWyBtZXRhIGxvYWQgbDRwcm90byA9PiByZWcgMSBdDQo+ID4gPiANCj4gPiA+IGZvciBt YW55IG9mIHRoZSBydWxlcy4gSSBiZWxpZXZlIHRoaXMgaXMgaW50ZW50aW9uYWwgYW5kIGNvcnJl Y3QNCj4gPiA+IGJ5DQo+ID4gPiBpdHNlbGYsIHNvIEkgZ3Vlc3MgdGhlIHByb2JsZW0gaXMgaW4g dGhlIGtlcm5lbCAodGhlIHN5c3RlbSBpcw0KPiA+ID4gY3VycmVudGx5IHJ1bm5pbmcgNC4xMy44 KSwgd2hlcmUgIm1ldGEgbDRwcm90byIgc29tZXRpbWVzIGlzbid0DQo+ID4gPiB3aGF0IGl0DQo+ ID4gPiBzaG91bGQgYmUuDQo+ID4gDQo+ID4gV2VpcmQuICBXZSBjaGFuZ2VkIHRoZSBpbXBsaWNp dCBsNCBkZXBlbmRlbmNpZXMgdG8gbWV0YSBsNHByb3RvDQo+ID4gYmVjYXVzZQ0KPiA+IGluIGlw djYgY2FzZSB0aGlzIHdpbGwgc2tpcCBleHRlbnNpb24gaGVhZGVycy4NCj4gPiANCj4gPiBJSVJD IGlwdjQgd2FzIG9ubHkgY2hhbmdlZCB0byBrZWVwIGl0IG1vcmUgc2ltcGxlLg0KPiA+IChhbHNv IG5mdF9zZXRfcGt0aW5mb19pcHY0IHNldHMNCj4gPiAgICAgICAgICBwa3QtPnRwcm90X3NldCA9 IHRydWU7DQo+ID4gICAgICAgICAgcGt0LT50cHJvdCA9IGlwaC0+cHJvdG9jb2w7DQo+ID4gDQo+ ID4gc28gSSBmYWlsIHRvIHNlZSB3aHkgaXQgc2hvdWxkIG5vdCBiZSBpZGVudGljYWwgaW4gYWxs IGNhc2VzKS4NCj4gDQo+IEFueSB0ZXN0aW5nLCBJIGNhbiBkbz8NCg0KT25lIG1vcmUgdGhpbmcs IEkganVzdCBub3RpY2VkIGlzIHRoYXQgaWYgSSB0cnkgdG8gdXNlIG5mdGFibGVzIDAuNyB0bw0K ZHVtcCB0aGUgcnVsZSBzZXQgdGhhdCB3YXMgbG9hZGVkIHdpdGggMC43LCBJIGdldCB0aGUgZm9s bG93aW5nIGVycm9yOg0KDQojIG5mdCBsaXN0IHJ1bGVzZXQNCm5mdDogcGF5bG9hZC5jOjU1MDog cGF5bG9hZF9leHByX2V4cGFuZDogQXNzZXJ0aW9uIGBkZXNjLT5iYXNlID09IGV4cHItPnBheWxv YWQuYmFzZScgZmFpbGVkLg0KQWJvcnRlZA0KDQpJZiBJIHVzZSAwLjggdG8gZHVtcCB0aGUgcnVs ZSBzZXQgdGhhdCB3YXMgbG9hZGVkIHdpdGggMC43LCBJIGdldCB0aGUNCmNvcnJlY3QgcnVsZSBz ZXQgZXhjZXB0IGZvciBhIGRpZmZlcmVuY2Ugd2l0aCByZWdhcmRzIHRvIHNldHMgYW5kIG1hcHMN CnRoYXQgdXNlIGludGVyZmFjZXMgbGlrZToNCg0KLS0tIG5mdC0wLjctMC44IHJ1bGUgc2V0IGxv YWRlZCB3aXRoIDAuNyBhbmQgZHVtcGVkIHdpdGggMC44DQorKysgbmZ0LTAuOCAgICAgc2FtZSBy dWxlIHNldCBsb2FkZWQgYW5kIGR1bXBlZCB3aXRoIDAuOA0KQEAgLTksMTIgKzksMTIgQEANCiAg ICAgICAgY2hhaW4gcHJlcm91dGluZyB7DQogICAgICAgICAgICAgICAgdHlwZSBmaWx0ZXIgaG9v ayBwcmVyb3V0aW5nIHByaW9yaXR5IC0xMDA7IHBvbGljeSBhY2NlcHQ7DQogICAgICAgICAgICAg ICAgaWlmICJsbyIgYWNjZXB0DQotICAgICAgICAgICAgICAgY3QgbWFyayBzZXQgaWlmIG1hcCB7 IDMzNTU0NDMyIDogMHgwMDAwMDAwMSwgNjcxMDg4NjQgOiAweDAwMDAwMDAyIH0NCisgICAgICAg ICAgICAgICBjdCBtYXJrIHNldCBpaWYgbWFwIHsgImV0aDAiIDogMHgwMDAwMDAwMSwgImV0aDIi IDogMHgwMDAwMDAwMiB9DQogICAgICAgICAgICAgICAgaWlmICJldGgxIiBqdW1wIHByZXJvdXRp bmdfaW50ZXJuYWwNCi0gICAgICAgICAgICAgICBpaWYgeyAzMzU1NDQzMiwgNjcxMDg4NjQgfSBp cCBzYWRkciB7IDAuMC4wLjAvOCwgMTAuMC4wLjAvOCwgMTI3LjAuMC4wLzgsIDE3Mi4xNi4wLjAv MTIsIDE5Mi4xNjguMC4wLzE2LCAyMjQuMC4wLjAtMjU1LjI1NS4yNTUuMjU1IH0gY291bnRlciBw YWNrZXRzIDYgYnl0ZXMgNzA1IGRyb3ANCisgICAgICAgICAgICAgICBpaWYgeyAiZXRoMCIsICJl dGgyIiB9IGlwIHNhZGRyIHsgMC4wLjAuMC84LCAxMC4wLjAuMC84LCAxMjcuMC4wLjAvOCwgMTcy LjE2LjAuMC8xMiwgMTkyLjE2OC4wLjAvMTYsIDIyNC4wLjAuMC0yNTUuMjU1LjI1NS4yNTUgfSBj b3VudGVyIHBhY2tldHMgMCBieXRlcyAwIGRyb3ANCg0KLS0NClJlZ2FyZHMsDQpBbmRlcnM=