-
Story
-
Resolution: Not a Bug
-
Undefined
-
None
-
None
-
None
-
None
-
3
-
rhel-net-firewall
-
None
-
False
-
False
-
-
None
-
NST-firewall-25W28-31, NST-firewall-25W32-35, NST-firewall-25W36-39
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
Kernel's timezone is UTC, so 'meta hour' returns seconds since UTC start of day. To mach against this, user space has to convert the RHS value given in local timezone into UTC. With ranges (e.g. 9:00-17:00), depending on the local timezone, these may span midnight in UTC (e.g. 23:00-7:00) and thus need to be converted into a proper range again (e.g. 7:00-23:00, inverted). Since nftables commit 347039f64509e ("src: add symbol range expression to further compact intervals"), this conversion was broken.
Upstream report: https://bugzilla.netfilter.org/show_bug.cgi?id=1805