1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
*ip;test-ip4
# BUG: There is a bug with icmp protocol and inet family.
# *inet;test-inet
:input;type filter hook input priority 0
icmp type echo-reply accept;ok
icmp type destination-unreachable accept;ok
icmp type source-quench accept;ok
icmp type redirect accept;ok
icmp type echo-request accept;ok
icmp type time-exceeded accept;ok
icmp type parameter-problem accept;ok
icmp type timestamp-request accept;ok
icmp type timestamp-reply accept;ok
icmp type info-request accept;ok
icmp type info-reply accept;ok
icmp type address-mask-request accept;ok
icmp type address-mask-reply accept;ok
icmp type {echo-reply, destination-unreachable, source-quench, redirect, echo-request, time-exceeded, parameter-problem, timestamp-request, timestamp-reply, info-request, info-reply, address-mask-request, address-mask-reply} accept;ok
- icmp type != {echo-reply, destination-unreachable, source-quench};ok
# BUG: icmp type != {echo-reply, destination-unreachable, source-quench}
# BUG: invalid expression type set
# nft: src/evaluate.c:975: expr_evaluate_relational: Assertion '0' failed.
icmp code 111 accept;ok
icmp code != 111 accept;ok
icmp code 33-55;ok
icmp code != 33-55;ok
icmp code { 33-55};ok
- icmp code != { 33-55};ok
icmp code { 2, 4, 54, 33, 56};ok
- icmp code != { 2, 4, 54, 33, 56};ok
# $ sudo nft add rule ip test input icmp code != {2, 4, 54, 33, 56}
# BUG: invalid expression type set
# nft: src/evaluate.c:975: expr_evaluate_relational: Assertion '0' failed.
icmp checksum 12343 accept;ok
icmp checksum != 12343 accept;ok
icmp checksum 11-343 accept;ok
icmp checksum != 11-343 accept;ok
icmp checksum { 11-343} accept;ok
- icmp checksum != { 11-343} accept;ok
icmp checksum { 1111, 222, 343} accept;ok
- icmp checksum != { 1111, 222, 343} accept;ok
# BUG: invalid expression type set
# icmp checksum != { 1111, 222, 343} accept;ok
# nft: src/evaluate.c:975: expr_evaluate_relational: Assertion '0' failed.
icmp id 1245 log;ok
icmp id 22;ok
icmp id != 233;ok
icmp id 33-45;ok
icmp id != 33-45;ok
icmp id { 33-55};ok
- icmp id != { 33-55};ok
icmp id { 22, 34, 333};ok
- icmp id != { 22, 34, 333};ok
# BUG: invalid expression type set
# icmp id != { 22, 34, 333}
# nft: src/evaluate.c:975: expr_evaluate_relational: Assertion '0' failed.
icmp sequence 22;ok
icmp sequence != 233;ok
icmp sequence 33-45;ok
icmp sequence != 33-45;ok
icmp sequence { 33, 55, 67, 88};ok
- icmp sequence != { 33, 55, 67, 88};ok
icmp sequence { 33-55};ok
- icmp sequence != { 33-55};ok
icmp mtu 33;ok
icmp mtu 22-33;ok
icmp mtu { 22-33};ok
- icmp mtu != { 22-33};ok
icmp mtu 22;ok
icmp mtu != 233;ok
icmp mtu 33-45;ok
icmp mtu != 33-45;ok
icmp mtu { 33, 55, 67, 88};ok
- icmp mtu != { 33, 55, 67, 88};ok
icmp mtu { 33-55};ok
- icmp mtu != { 33-55};ok
icmp gateway 22;ok
icmp gateway != 233;ok
icmp gateway 33-45;ok
icmp gateway != 33-45;ok
icmp gateway { 33, 55, 67, 88};ok
- icmp gateway != { 33, 55, 67, 88};ok
icmp gateway { 33-55};ok
- icmp gateway != { 33-55};ok
icmp gateway != 34;ok
- icmp gateway != { 333, 334};ok
|
