-
Bug
-
Resolution: Unresolved
-
Undefined
-
rhel-8.9.0
-
nftables-1.0.4-6.el8_10
-
No
-
Moderate
-
-
rhel-sst-networking-core
-
ssg_networking
-
3
-
False
-
-
None
-
Red Hat Enterprise Linux
-
None
-
Requested
-
None
-
-
x86_64
-
None
What were you trying to do that didn't work?
Unable to add a range of port number through nft insert command.
What is the impact of this issue to you?
Not able to mention a range of ports numbers in the nft insert command.
Please provide the package NVR for which the bug is seen:
nftables-1.0.4-4.el8_9.x86_64
How reproducible is this bug?:
Steps to reproduce
When using nft, the command emits error and crashes.
To duplicate ```
// ** nftables-1.0.4-4.el8_9.x86_64 **
- # systemctl enable nftables.service
- # systemctl restart nftables.service
- # nft flush ruleset
- # nft add table ip filter
- # nft add chain ip filter INPUT { type filter hook input priority 0 \; }
- # nft insert rule ip filter INPUT ip protocol tcp ip saddr 172.31.56.10 tcp dport { 22-23,513,514,5900,5901} counter accept
- BUG: unhandled op 4
- nft: evaluate.c:1522: interval_set_eval: Assertion `0' failed.
- Aborted (core dumped) ```
Expected results
Expected result is that the nft command should allow to mention port range in nft insert command.
Actual results
Getting below error.
- nft insert rule ip filter INPUT ip protocol tcp ip saddr 172.31.56.10 tcp dport { 22-23,513,514,5900,5901} counter accept
- BUG: unhandled op 4
- nft: evaluate.c:1522: interval_set_eval: Assertion `0' failed.
- Aborted (core dumped)