Re: Suggestion: Default (else) value for maps, dictionaries, and Verdicts

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Thu, Mar 16, 2017 at 11:55:35PM +0000, Robert White wrote:
> Being able to set (and preferably modify at runtime) a default value to be
> returned/evaluated/executed for the various search-and-do lists (sets) would
> be extremely helpful.

I guess you refer to some sort of catch-all case, if we find no
matching in the set.

> You can kind of fake it with a verdict set of goto(s) and a subsequent
> unconditional goto but that's branchtastically elaborate.
> 
> So the existence of a possible default would be value-attached flag (just
> like timeout is a flag with a value).
> 
> I don't have the familiarity with the whole stack (nft, library, and kernel
> state machine) necessary to offer a patch at this time since it would take a
> nudge of all three to be able to test it all.

Please, add an entry to the netfilter's bugzilla, so we can keep an
eye on this.

Thanks!