* nftables v0.9.0 netlink: Error: set is not a map
@ 2019-10-21 20:08 Daniel Huhardeaux
2019-10-22 0:30 ` Trent W. Buck
0 siblings, 1 reply; 3+ messages in thread
From: Daniel Huhardeaux @ 2019-10-21 20:08 UTC (permalink / raw)
To: netfilter
Hello,
I created a bash script under Debian/Buster to create nft rules: it
works perfectly.
Now I copy this script to a Debian/Stretch machine (nftables v0.7.0) and
get in troubles to make it work: at some point I receive the subject error.
OK, I think it's a version problem: I installed nftables from Stretch
backports which is the same version as the Buster one, v0.9.0 But bang,
error is still here :(
What can be the cause of this error? Yes, I use sets, and no, they are
no maps defined.
Thanks for any hint
--
TOOTAi Networks
Daniel
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: nftables v0.9.0 netlink: Error: set is not a map
2019-10-21 20:08 nftables v0.9.0 netlink: Error: set is not a map Daniel Huhardeaux
@ 2019-10-22 0:30 ` Trent W. Buck
2019-10-22 8:31 ` Daniel Huhardeaux
0 siblings, 1 reply; 3+ messages in thread
From: Trent W. Buck @ 2019-10-22 0:30 UTC (permalink / raw)
To: netfilter
Daniel Huhardeaux <tech@tootai.net> writes:
> I created a bash script under Debian/Buster to create nft rules: it
> works perfectly.
>
> Now I copy this script to a Debian/Stretch machine (nftables v0.7.0)
> and get in troubles to make it work: at some point I receive the
> subject error.
>
> OK, I think it's a version problem: I installed nftables from Stretch
> backports which is the same version as the Buster one, v0.9.0 But
> bang, error is still here :(
>
> What can be the cause of this error? Yes, I use sets, and no, they are
> no maps defined.
Can you show us your actual ruleset.nft?
Or (better yet) distill it down to a minimal test ruleset.nft that
generates the problem, and show us that.
I don't recognize the specific error.
I have seen similar errors before due to brainos in my ruleset.
I agree it doesn't make sense that the same version (nftables=0.9.0 on
Debian 9 and Debian 10) should parse the same way - so maybe it's a
difference on the kernel side?
Are you running
4.19.67-2+deb10u1~bpo9+1 on Debian 9, and
4.19.67-2 on Debian 10?
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: nftables v0.9.0 netlink: Error: set is not a map
2019-10-22 0:30 ` Trent W. Buck
@ 2019-10-22 8:31 ` Daniel Huhardeaux
0 siblings, 0 replies; 3+ messages in thread
From: Daniel Huhardeaux @ 2019-10-22 8:31 UTC (permalink / raw)
To: netfilter
Le 22/10/2019 à 02:30, Trent W. Buck a écrit :
> Daniel Huhardeaux <tech@tootai.net> writes:
>
>> I created a bash script under Debian/Buster to create nft rules: it
>> works perfectly.
>>
>> Now I copy this script to a Debian/Stretch machine (nftables v0.7.0)
>> and get in troubles to make it work: at some point I receive the
>> subject error.
>>
>> OK, I think it's a version problem: I installed nftables from Stretch
>> backports which is the same version as the Buster one, v0.9.0 But
>> bang, error is still here :(
>>
>> What can be the cause of this error? Yes, I use sets, and no, they are
>> no maps defined.
>
> Can you show us your actual ruleset.nft?
>
> Or (better yet) distill it down to a minimal test ruleset.nft that
> generates the problem, and show us that >
> I don't recognize the specific error.
> I have seen similar errors before due to brainos in my ruleset.
>
> I agree it doesn't make sense that the same version (nftables=0.9.0 on
> Debian 9 and Debian 10) should parse the same way - so maybe it's a
> difference on the kernel side?
>
> Are you running
> 4.19.67-2+deb10u1~bpo9+1 on Debian 9, and
> 4.19.67-2 on Debian 10?
Debian9 Debian 4.9.189-3+deb9u1
Debian10 Debian 4.19.67-2+deb10u1
I found the culpit: myself. I copy values from iptables rules where
range are given separated by colon and I forgot to replace this one by a
dash :(
Thanks for your support
--
Daniel
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2019-10-22 8:31 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-10-21 20:08 nftables v0.9.0 netlink: Error: set is not a map Daniel Huhardeaux
2019-10-22 0:30 ` Trent W. Buck
2019-10-22 8:31 ` Daniel Huhardeaux
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.