nft bug: Deleting map elements with intervals

nft bug: Deleting map elements with intervals

[Felix Kluge]

[-- Attachment #1: Type: text/plain, Size: 750 bytes --]

Hello,

we're currently trying to use a vertict map to jump to other chains. The
key of the map is a subnet.

table ip filter {
  map cgn_map {
    type ipv4_addr : verdict
    flags interval
    elements = {
      100.64.2.0/24 : goto chain-100-64-2-0}
  }
}


Adding new elements to the map works well:

nft add element filter cgn_map { 100.64.3.0/24 : goto ratelimit-100-64-3-0}


However, deleting elements from the map does not work:

nft delete element filter cgn_map 100.64.2.0/24
<cmdline>:1:36-45: Error: syntax error, unexpected string, expecting '{' or '$'


I would appreciate any hints how to solve this issue.

We have build nft from the current master branch, last commit is b2d7b78af50d199201e7e0d6de7c1ba9ba471c12.


Greetings
Felix

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

Re: nft bug: Deleting map elements with intervals

[Pablo Neira Ayuso]

On Sun, Feb 26, 2017 at 05:38:55PM +0100, Felix Kluge wrote:
> Hello,
> 
> we're currently trying to use a vertict map to jump to other chains. The
> key of the map is a subnet.
> 
> table ip filter {
>   map cgn_map {
>     type ipv4_addr : verdict
>     flags interval
>     elements = {
>       100.64.2.0/24 : goto chain-100-64-2-0}
>   }
> }
> 
> 
> Adding new elements to the map works well:
> 
> nft add element filter cgn_map { 100.64.3.0/24 : goto ratelimit-100-64-3-0}
> 
> 
> However, deleting elements from the map does not work:
> 
> nft delete element filter cgn_map 100.64.2.0/24
> <cmdline>:1:36-45: Error: syntax error, unexpected string, expecting '{' or '$'

Parens are missing, this should be:

        nft delete element filter cgn_map { 100.64.2.0/24 }

Thanks.