nftable transform 'x !=a-b' in wrong way:
cmp x < a
cmp x > b

which means x has to be x<a && x>b.
but it should be x<a || x>b.

It seems that the vm system in kernel is too simple and fast
to provide some expr or process for this case, afaics.

does upstream have been preparing some fix for this ?
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to