From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leon Merten Lohse Subject: Re: nftables: named set for ipv4 networks Date: Wed, 30 Nov 2016 00:00:11 +0100 Message-ID: <20161130000011.0a751e9a@doomgiver> References: <20161023213822.16337e5c@doomgiver> <20161027192338.GA1570@salvia> <20161027234152.2c94a832@doomgiver> <20161028080419.GB1553@salvia> <20161028162353.7da8573c@doomgiver> <20161102113006.0b3de6cd@doomgiver> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" To: Netfilter Users Mailing list Is there a fix in sight for this? Can I be of assistance somehow? Best Leon On Thu, 3 Nov 2016 12:29:28 +0100 Arturo Borrero Gonzalez wrote: > On 2 November 2016 at 11:30, Leon Merten Lohse > wrote: > > I would really appreciate if someone could comment on this. > > > > The problem is that nft complains about overlapping intervals in the > > set, if I load the following ruleset twice. > > This occurs even though there is a `flush ruleset' directive at the > > beginning of the ruleset. As far as I understand it, all sets > > should be empty after that. > > Calling `nft flush ruleset' beforehand works around this but is no > > longer atomic. > > > > Yes, this is probably some bug in the nft cache. > > Will send a testcase so we don't forget about fixing this. > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" > in the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html