Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-62895

Unable to set port range/interval in nftables using nft insert command.

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-8.10.z
    • rhel-8.9.0
    • nftables
    • nftables-1.0.4-6.el8_10
    • No
    • Moderate
    • Hide
      Upstream nftables repository commit.

      commit 91626261c9dfedbd1e8ff40959b453418ebc8fb6
      evaluate: un-break rule insert with intervals

      Show
      Upstream nftables repository commit. commit 91626261c9dfedbd1e8ff40959b453418ebc8fb6 evaluate: un-break rule insert with intervals
    • rhel-sst-networking-core
    • ssg_networking
    • 3
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • Requested
    • None
    • x86_64
    • None

      What were you trying to do that didn't work?

       

      Unable to add a range of port number through nft insert command.

      What is the impact of this issue to you?

       

      Not able to mention a range of ports numbers in the nft insert command.

      Please provide the package NVR for which the bug is seen:

       nftables-1.0.4-4.el8_9.x86_64

      How reproducible is this bug?:

      Steps to reproduce

      When using nft, the command emits error and crashes.

      To duplicate ```

      // ** nftables-1.0.4-4.el8_9.x86_64 **

      1. # systemctl enable nftables.service
      2. # systemctl restart nftables.service
      3. # nft flush ruleset
      4. # nft add table ip filter
      5. # nft add chain ip filter INPUT { type filter hook input priority 0 \; }
      6. # nft insert rule ip filter INPUT ip protocol tcp ip saddr 172.31.56.10 tcp dport { 22-23,513,514,5900,5901} counter accept
      7. BUG: unhandled op 4
      8. nft: evaluate.c:1522: interval_set_eval: Assertion `0' failed.
      9. Aborted (core dumped) ```

      Expected results

       

      Expected result is that the nft command should allow to mention port range in nft insert command.

      Actual results

       

      Getting below error.

      1. nft insert rule ip filter INPUT ip protocol tcp ip saddr 172.31.56.10 tcp dport { 22-23,513,514,5900,5901} counter accept
      2. BUG: unhandled op 4
      3. nft: evaluate.c:1522: interval_set_eval: Assertion `0' failed.
      4. Aborted (core dumped)

              psutter@redhat.com Phil Sutter
              rhn-support-mmhatre Mithil Mhatre
              Phil Sutter Phil Sutter
              Tomas Dolezal Tomas Dolezal
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: