Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-114152

[s390x] nft fib exists doesn't work on s390x

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-10.0
    • nftables
    • None
    • No
    • Important
    • rhel-net-firewall
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • s390x
    • None

      What were you trying to do that didn't work?

      nft expression fib saddr . iif oif exists

      doesn't work on s390x

      Please provide the package NVR for which the bug is seen:

      nftables-1.1.1-5.el10.s390x
      6.12.0-124.el10.s390x

      How reproducible is this bug?:

      always

      Steps to reproduce

      1. Run the reproducer attatched.
      2.  
      3.  

      Expected results

      Actual results

      Expression: fib saddr . iif oif exists doesn't work on s390x.
      Run the script attached.
      Neither "missing" nor "exists" rule get matched

      table ip filter {
              chain prerouting {
                      type filter hook prerouting priority filter; policy accept;
                      icmp type echo-request fib saddr . iif oif missing counter packets 0 bytes 0
                      icmp type echo-request fib saddr . iif oif exists counter packets 0 bytes 0
              }
      }
      

       

              psutter@redhat.com Phil Sutter
              rhn-support-yiche Yi Chen
              Phil Sutter Phil Sutter
              Jiri Peska Jiri Peska
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: