Error when using 'time' statement in nftables 1.0.2 rule

Error when using 'time' statement in nftables 1.0.2 rule

[Martin Gignac]

Hello,

On nftables 1.0.1, I can run this command just fine:

    nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
    nft>

On 1.0.2, however, it gives me this error:

    nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
    Error: No symbol type information
    add rule inet filter input iif lo time < "2022-07-01 11:00" accept
                                    ^^^^
Have I encountered a bug, or has the usage of the 'time' statement
simply changed?

Thanks,
-Martin

Re: Error when using 'time' statement in nftables 1.0.2 rule

[Jeremy Sowden]

[-- Attachment #1: Type: text/plain, Size: 644 bytes --]

On 2022-04-07, at 22:19:30 -0400, Martin Gignac wrote:
> On nftables 1.0.1, I can run this command just fine:
> 
>     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>     nft>
> 
> On 1.0.2, however, it gives me this error:
> 
>     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>     Error: No symbol type information
>     add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>                                     ^^^^
> Have I encountered a bug, or has the usage of the 'time' statement
> simply changed?

It appears to be a bug.  I shall send a fix.

J.


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Error when using 'time' statement in nftables 1.0.2 rule

[Jeremy Sowden]

[-- Attachment #1: Type: text/plain, Size: 784 bytes --]

On 2022-04-08, at 09:08:59 +0100, Jeremy Sowden wrote:
> On 2022-04-07, at 22:19:30 -0400, Martin Gignac wrote:
> > On nftables 1.0.1, I can run this command just fine:
> > 
> >     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
> >     nft>
> > 
> > On 1.0.2, however, it gives me this error:
> > 
> >     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
> >     Error: No symbol type information
> >     add rule inet filter input iif lo time < "2022-07-01 11:00" accept
> >                                     ^^^^
> > Have I encountered a bug, or has the usage of the 'time' statement
> > simply changed?
> 
> It appears to be a bug.  I shall send a fix.

No need.  Somebody else has already committed one.

J.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Error when using 'time' statement in nftables 1.0.2 rule

[Pablo Neira Ayuso]

On Thu, Apr 07, 2022 at 10:19:30PM -0400, Martin Gignac wrote:
> Hello,
> 
> On nftables 1.0.1, I can run this command just fine:
> 
>     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>     nft>
> 
> On 1.0.2, however, it gives me this error:
> 
>     nft> add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>     Error: No symbol type information
>     add rule inet filter input iif lo time < "2022-07-01 11:00" accept
>                                     ^^^^
> Have I encountered a bug, or has the usage of the 'time' statement
> simply changed?

I can reproduce it, this is a bug.

I cannot reproduce it though with current nftables git snapshot (it's
basically 1.0.2 with a few patches on top).

Re: Error when using 'time' statement in nftables 1.0.2 rule

[Martin Gignac]

> It appears to be a bug.  I shall send a fix.
> No need.  Somebody else has already committed one.

> I can reproduce it, this is a bug.
> I cannot reproduce it though with current nftables git snapshot (it's
basically 1.0.2 with a few patches on top).

Thanks guys.

By the way, I have just noticed that while this gives an error on 1.0.2:

    add rule inet filter input iif lo time < "2022-07-01 11:00" accept

This does not:

    add rule inet filter input iif lo meta time < "2022-07-01 11:00" accept

The use of 'meta' in front of 'time' works around the bug.

-Martin