Re: not able to set ct state rule

[Florian Westphal <fw@strlen.de>]

Andreas Hoefler <andreas.hoefler@hitachi-powergrids.com> wrote:
> Hi
> 
> I am trying to set up a basic connection tracking rule:
> #nft list ruleset
> table ip filter {
>         chain input {
>                 type filter hook input priority 0; policy accept;
>         }
> }
> # nft add rule filter input ct state established accept
> Error: Could not process rule: No such file or directory
> add rule filter input ct state established accept
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

works for me on 5.6.18.

> cat /proc/config.gz | gunzip | grep NFT
> # CONFIG_NFT_NUMGEN is not set
> CONFIG_NFT_CT=m

Does "modinfo nft_ct" work?
If its does, is that module loaded?
If not, try to load it manually.

If that makes the rule add work, then module autoloading is broken
on your system for some reason.