#!/bin/bash # NFT_TEST_REQUIRES(NFT_TEST_HAVE_set_with_two_expressions) RULESET="table x { set y { type ipv4_addr size 65535 flags dynamic counter quota 500 bytes elements = { 1.2.3.4 counter packets 9 bytes 756 quota 500 bytes used 500 bytes } } chain y { type filter hook output priority filter; policy accept; update @y { ip daddr } } }" $NFT -f - <<< $RULESET # should work if [ $? -ne 0 ] then exit 1 fi # should work $NFT add element x y { 1.1.1.1 } if [ $? -ne 0 ] then exit 1 fi # should work $NFT add element x y { 2.2.2.2 counter quota 1000 bytes } if [ $? -ne 0 ] then exit 1 fi exit 0