Re: nftables feature request: modify set element timeout

2019-08-01 Thread Fran Fitzpatrick
set element from the userspace `nft` command. Fran On Thu, Jul 25, 2019 at 7:24 AM Laura Garcia wrote: > > On Tue, Jul 23, 2019 at 1:10 AM Fran Fitzpatrick > wrote: > > > > This morning I was using the `timeout` feature of nftables, but came > > across an apparent limi

nftables feature request: modify set element timeout

2019-07-22 Thread Fran Fitzpatrick
This morning I was using the `timeout` feature of nftables, but came across an apparent limitation where I was not able to update an element in a set's timeout value unless I removed the element from the set. Can it be possible to handle the element timeout value without needed to remove it from a

Re: Found Regression in v0.8.x

2018-04-30 Thread Fran Fitzpatrick
Florian, > Its a bug that is fixed in the master branch of nftables.git on netfilter.org, Out of curiosity, do you have the commit for that so I could take a look? Thanks! On Mon, Apr 30, 2018 at 9:48 AM, Florian Westphal wrote: > Fran Fitzpatrick wrote: >> Test Ruleset That Iden

Re: Found Regression in v0.8.x

2018-04-30 Thread Fran Fitzpatrick
Got it. Thanks for the fast reply, Florian! We'll keep an eye out for the next release. On Mon, Apr 30, 2018 at 9:48 AM, Florian Westphal wrote: > Fran Fitzpatrick wrote: >> Test Ruleset That Identified Error: >> https://gist.github.com/fxfitz/79e63794adab2bddb8b312a3ea7af4

Found Regression in v0.8.x

2018-04-30 Thread Fran Fitzpatrick
Our CI started failing this morning on a test that ensures nft is able to load our generated ruleset (ex: `nft -f test.txt`). It was definitely a surprise for us since we hadn't touched our ruleset template in quite a while. After doing a little bit of digging, it looks like Fedora upgraded from

Userspace nft parser limitations / suggestions / help

2018-02-15 Thread Fran Fitzpatrick
Good morning, I've recently switched to using nftables for one of our customer environments that we manage, and there were a few limitations that I have seem to run into, so I'd like to bring them up here for discussion (since I could just be missing something and it may be available and I just do