[pkg-netfilter-team] Bug#1001360: nftables: nft returns "BUG: unsupported familynft: evaluate.c:2766..."

Bruce Link bruce at 1045.ca
Thu Dec 9 03:01:48 GMT 2021


Package: nftables
Version: 1.0.1-1
Severity: normal
Tags: upstream

Dear Maintainer,

   * What led up to the situation?
Running nft -f with the following configuration appears to trigger the bug. I've removed what I think are the non-relevant parts.

table inet filter {
    set netflix-ips {
        type ipv4_addr;
        flags interval;
        elements = {
            52.0.131.132,
            23.221.228.214,
            8.207.84.236,
            54.204.25.0-54.204.25.16,
            3.23.189.144-3.23.189.160,
            34.195.253.0-34.195.253.128,
        }
    }

    chain kill-kids-netflix {
        ether saddr ba:db:ee:ff:5e:39 ip daddr @netflix-ips reject;
    }

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
Not applicable.

   * What was the outcome of this action?
nft returns the following:

~$ sudo nft -f /etc/nftables.conf 
BUG: unsupported familynft: evaluate.c:2766: stmt_evaluate_reject_inet_family: Assertion `0' failed.
Aborted

   * What outcome did you expect instead?
nft to load the rules properly or complain about my often poor syntax.


-- System Information:
Debian Release: bookworm/sid
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.0-2-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages nftables depends on:
ii  libc6         2.32-4
ii  libedit2      3.1-20210910-1
ii  libnftables1  1.0.1-1

Versions of packages nftables recommends:
ii  netbase  6.3

Versions of packages nftables suggests:
pn  firewalld  <none>

-- Configuration Files:
/etc/nftables.conf changed [not included]

-- no debconf information



More information about the pkg-netfilter-team mailing list