[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netfilter
Subject:    Re: Fwd: nftables ipv6 and NAT
From:       Florian Westphal <fw () strlen ! de>
Date:       2018-04-23 21:01:14
Message-ID: 20180423210114.tpiait42euwpyd4s () breakpoint ! cc
[Download RAW message or body]

ad^2 <adsquaired@gmail.com> wrote:
> nft add rule ip6 test prerouting dnat ip6 saddr . ip6 daddr . udp
> dport map @dest_nat
> 
> The error from executing the above command
> 
> nft: netlink_linearize.c:609: netlink_gen_expr: Assertion `dreg <
> ctx->reg_low' failed.
> Aborted (core dumped)
>
> This does work in nftables using the ip family. Ex. "add rule test
> prerouting dnat ip saddr . ip daddr . udp dport map @dest_nat"
> 
> What am I missing? Can I provide more technical information?

Nothing, the assert triggers due to a bug in nftables.
Its fixed in git.

I think we should make a new release soon.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
[prev in list] [next in list] [prev in thread] [next in thread]