* nftables element not in set
@ 2021-07-22 22:50 Stephen Satchell
2021-07-22 23:03 ` Florian Westphal
0 siblings, 1 reply; 2+ messages in thread
From: Stephen Satchell @ 2021-07-22 22:50 UTC (permalink / raw)
To: netfilter
As the documentation currently reads, you can use set expressions like this:
tcp dport {22,8022} accept
Is there anything in the nftables syntax that permits detecting the
absence of a match? Something like
tcp not dport {22,8022}
or
tcp dport not in {22,8022}
All the examples and descriptions have netfilter only test for set
union, not for set difference.
What am I missing here?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: nftables element not in set
2021-07-22 22:50 nftables element not in set Stephen Satchell
@ 2021-07-22 23:03 ` Florian Westphal
0 siblings, 0 replies; 2+ messages in thread
From: Florian Westphal @ 2021-07-22 23:03 UTC (permalink / raw)
To: Stephen Satchell; +Cc: netfilter
Stephen Satchell <list@satchell.net> wrote:
> As the documentation currently reads, you can use set expressions like this:
>
> tcp dport {22,8022} accept
>
> Is there anything in the nftables syntax that permits detecting the absence
> of a match? Something like
>
> tcp not dport {22,8022}
tcp dport != { 22, 8022 } accept
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2021-07-22 23:03 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-07-22 22:50 nftables element not in set Stephen Satchell
2021-07-22 23:03 ` Florian Westphal
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.