* nftables: precondition validation fails on map construct
@ 2015-08-13 14:28 Andreas Schultz
2015-08-17 14:24 ` Patrick McHardy
0 siblings, 1 reply; 2+ messages in thread
From: Andreas Schultz @ 2015-08-13 14:28 UTC (permalink / raw)
To: netfilter-devel; +Cc: Pablo Neira Ayuso
Hi,
As far as I can tell the following construct should be valid:
# nft add nat prerouting ip protocol {tcp, udp} snat 10.200.4.1-10.200.4.254:10240-20480
However it fails with:
<cmdline>:1:72-82: Error: transport protocol mapping is only valid after transport protocol match
add nat prerouting ip protocol {tcp, udp} snat 10.200.4.1-10.200.4.254:10240-20480
~~~~ ^^^^^^^^^^^
Is this intended behaviour?
Andreas
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: nftables: precondition validation fails on map construct
2015-08-13 14:28 nftables: precondition validation fails on map construct Andreas Schultz
@ 2015-08-17 14:24 ` Patrick McHardy
0 siblings, 0 replies; 2+ messages in thread
From: Patrick McHardy @ 2015-08-17 14:24 UTC (permalink / raw)
To: Andreas Schultz; +Cc: netfilter-devel, Pablo Neira Ayuso
On 13.08, Andreas Schultz wrote:
> Hi,
>
> As far as I can tell the following construct should be valid:
>
> # nft add nat prerouting ip protocol {tcp, udp} snat 10.200.4.1-10.200.4.254:10240-20480
>
> However it fails with:
>
> <cmdline>:1:72-82: Error: transport protocol mapping is only valid after transport protocol match
> add nat prerouting ip protocol {tcp, udp} snat 10.200.4.1-10.200.4.254:10240-20480
> ~~~~ ^^^^^^^^^^^
>
> Is this intended behaviour?
Yes, sets don't create a protocol context since we can currently only handle
a single protocol. It could be made to work, but right now it is expected
behaviour.
>
> Andreas
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-08-17 14:24 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-08-13 14:28 nftables: precondition validation fails on map construct Andreas Schultz
2015-08-17 14:24 ` Patrick McHardy
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).