[pkg-netfilter-team] Bug#935858: nftables: lacks documentation
westlake
westlake2012 at videotron.ca
Wed Aug 28 21:35:04 BST 2019
actually there's still no mention of chain names able to be stored in
capitals.
The migratory tools automatically make capitals from iptables, and users
would be tempted to try out documented commands. (even the link provided
says nothing)
.. so you re-consider adding this as a side-note.
new users are tempted to try,
"nft list chain filter output
Error: No such file or directory
list chain filter output
^^^^^^
"
the nft syntax is difficult to grasp, and the output here is not even clear.
If the output (I would say upstream is to blame) was actually more
clear, then I would not need to report on confusion about this, and not
have to dwell on telling you to provide some insight on what migratory
tools actually do.
The fact that error output and online documentation mentions nothing
about having capitals for chain names, is the reason why I decided to
file this report.
The fact that many users also use migratory tools and likely face this
same issue, is another reason why I think many users would actually
benefit from a note or two in the README.Debian file.
You should take the perspective that new adopters face this issue, and
that I wouldn't be the only one facing this.
Let it not be a main reason why NFT has not been widely adopted on
Debian, because the least thing you could have done is to show me where
I am wrong.
Show me where it is documented. Show me where it says that chain names
can be in capitals.
Otherwise document it in README.Debian.
^ It's a Debian policy, and if you don't do it, then I will have to
complain to the top leader about you being such a baby and revoke your
abilities in maintaining this package.
You also closed my other bugreport without a real good explanation on
why you need to have nft binary executables at the header of .conf
files. To me that is not just silly but impractical. Online
documentation sources mention about using "nft list ruleset >
nftables.conf" and effectively that overwrites the header.
Use a bit of logic in maintaining this package.
thanks
More information about the pkg-netfilter-team
mailing list