<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Package: nftables<br>
Version: 0.9.0-1~bpo9+1<br>
Severity: <font size="+1"><code>important</code></font><br>
<br>
Dear Maintainer,</p>
<p>nft -f import rules wich can't be deleted afterwards.</p>
<p><tt>root@xmachine1:/home/user/testcase# nft -f /etc/nftables.conf
</tt><tt><br>
</tt><tt>root@xmachine1:/home/user/testcase# nft -f /tmp/fail </tt><tt><br>
</tt><tt>root@xmachine1:/home/user/testcase# nft list ruleset</tt><tt><br>
</tt><tt>table ip filter {</tt><tt><br>
</tt><tt> set S1 {</tt><tt><br>
</tt><tt> type ipv4_addr</tt><tt><br>
</tt><tt> flags interval</tt><tt><br>
</tt><tt> elements = { 10.5.0.20/31 }</tt><tt><br>
</tt><tt> }</tt><tt><br>
</tt><tt><br>
</tt><tt> chain FORWARD {</tt><tt><br>
</tt><tt> type filter hook forward priority 0; policy
accept;</tt><tt><br>
</tt><tt> }</tt><tt><br>
</tt><tt>}</tt><tt><br>
</tt><tt>root@xmachine1:/home/user/testcase# nft delete element
filter S1 { 10.5.0.20/31 } </tt><tt><br>
</tt><tt>Error: Could not process rule: No such file or directory</tt><tt><br>
</tt><tt>delete element filter S1 { 10.5.0.20/31 }</tt><tt><br>
</tt><tt>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^</tt><br>
</p>
<p>Content of File /etc/nftables.conf</p>
<tt>#!/usr/sbin/nft -f</tt><tt><br>
</tt><tt># Skeleton for nftables </tt><tt><br>
</tt><tt><br>
</tt><tt>flush ruleset</tt><tt><br>
</tt><tt><br>
</tt><tt>table ip filter {</tt><tt><br>
</tt><tt> chain FORWARD {</tt><tt><br>
</tt><tt> type filter hook forward priority 0;</tt><tt><br>
</tt><tt> }</tt><tt><br>
</tt><tt>}</tt><br>
<p>Content of File /tmp/fail</p>
<p><tt>add set filter S1 { type ipv4_addr; flags interval; }</tt><br>
<tt>add element filter S1 { 10.5.0.20/31 }</tt><br>
</p>
This does not happen, if we export it with nft and import it back
again!
<p>-- System Information:<br>
Debian Release: 9.6<br>
APT prefers stable<br>
APT policy: (990, 'stable'), (500, 'stable-updates'), (50,
'testing')<br>
Architecture: amd64 (x86_64)<br>
<br>
Kernel: Linux 4.18.0-0.bpo.1-amd64 (SMP w/1 CPU core)<br>
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)<br>
Shell: /bin/sh linked to /bin/dash<br>
Init: systemd (via /run/systemd/system)<br>
<br>
Versions of packages nftables depends on:<br>
ii dpkg 1.18.25<br>
ii libc6 2.24-11+deb9u3<br>
ii libgmp10 2:6.1.2+dfsg-1<br>
ii libnftables0 0.9.0-1~bpo9+1<br>
ii libreadline7 7.0-3</p>
nftables recommends no packages.<br>
<br>
nftables suggests no packages.<br>
<br>
-- Configuration Files:<br>
/etc/nftables.conf changed:<br>
flush ruleset<br>
table ip filter {<br>
chain FORWARD {<br>
type filter hook forward priority 0;<br>
}<br>
}
</body>
</html>