Re: Nftables v6 address not matched properly in nftable set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'd first try using address ranges that are appropriate. It looks like
you are trying to adapt RFC1918 addresses (for IPv4) into IPv6
addresses. For RFC1918 equivalent addresses in IPv6, you probably want
RFC4193 addresses. You can use something like
https://unique-local-ipv6.com/ to generate your own prefix, that way
you are using address space that won't get unusual treatment by the IP
stack itself.

Second, when using intervals, I always specify an explicit mask. In
v6, that means a /128 mask for a single host. I tend to not use
intervals unless they fall on a CIDR boundary. That might not work for
your needs, but it makes the rules easier, and there's so much address
space available in IPv6 that you can usually use CIDR boundaries
without issue.

I don't know that either of these would change the behavior of your
examples, but they might make it easier to identify the problem.

Also, be careful about trying to apply IPv4 logic to IPv6 addresses.
One is in decimal, the other is in hex.

Respectfully,
~Bradley Hook, J.D.
Director, Information Systems
Google Certified Project Manager
Kansas State Schools for the Deaf and the Blind
bhook@xxxxxxxxxxxxxx
Mobile: 913-275-9982

-- 
*Kansas State Schools for the Deaf and the Blind Confidentiality Notice**:* 
 
The information contained in this e-mail transmission is confidential and 
legally protected.  It is intended for the sole use of the individual(s) 
entity named in the message header.  If you are not the intended recipient, 
you are hereby notified that any dissemination or copying of this 
information is strictly prohibited.  If you received this message in error, 
please notify the sender of the error and delete this message and any 
attachments.





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux