[pkg-netfilter-team] Bug#914706: Add 1 more element to a set and you can delete the 1st element

Eike Lohmann eike.lohmann at mdex.de
Wed Nov 28 09:06:57 GMT 2018


root at xmachine1:/home/user/testcase# nft add element filter S1 { 10.6.0.0/28 }
root at xmachine1:/home/user/testcase# nft list set filter S1
table ip filter {
    set S1 {
        type ipv4_addr
        flags interval
        elements = { 10.5.0.20/31, 10.6.0.0/28 }
    }
}
root at xmachine1:/home/user/testcase# nft delete element filter S1 { 10.5.0.20/31 }
root at xmachine1:/home/user/testcase# nft list set filter S1
table ip filter {
    set S1 {
        type ipv4_addr
        flags interval
        elements = { 10.6.0.0/28 }
    }
}
root at xmachine1:/home/user/testcase# nft delete element filter S1 { 10.6.0.0/28 }
Error: Could not process rule: No such file or directory
delete element filter S1 { 10.6.0.0/28 }
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
root at xmachine1:/home/user/testcase#
root at xmachine1:/home/user/testcase#
root at xmachine1:/home/user/testcase# nft add element filter S1 { 10.7.0.0/28 }
root at xmachine1:/home/user/testcase# nft delete element filter S1 { 10.6.0.0/28 }
root at xmachine1:/home/user/testcase# nft list set filter S1
table ip filter {
    set S1 {
        type ipv4_addr
        flags interval
        elements = { 10.7.0.0/28 }
    }
}



More information about the pkg-netfilter-team mailing list