}
chain test {
- ip daddr 2.2.2.2 counter packets 0 bytes 0 accept
+ ip daddr { 2.2.2.2 } counter packets 0 bytes 0 accept
ip saddr @test counter packets 0 bytes 0 accept
- ip daddr 2.2.2.2 counter packets 0 bytes 0 accept
+ ip daddr { 2.2.2.2 } counter packets 0 bytes 0 accept
}
}
netns_exec $NETNS_NAME "$NFT add chain ip t c"
netns_exec $NETNS_NAME "$NFT add chain ip t other"
netns_exec $NETNS_NAME "$NFT add set ip t s { type ipv4_addr; }"
-netns_exec $NETNS_NAME "$NFT add element ip t s {1.1.0.0}"
+netns_exec $NETNS_NAME "$NFT add element ip t s {1.1.0.0 }"
netns_exec $NETNS_NAME "$NFT add rule ip t c ct state new"
-netns_exec $NETNS_NAME "$NFT add rule ip t c udp dport 12345"
+netns_exec $NETNS_NAME "$NFT add rule ip t c udp dport { 12345 }"
netns_exec $NETNS_NAME "$NFT add rule ip t c ip saddr @s drop"
netns_exec $NETNS_NAME "$NFT add rule ip t c jump other"
chain c {
ct state new
- udp dport 12345
+ udp dport { 12345 }
ip saddr @s drop
jump other
}