nftables: adding a set produces an error while using the "dynamic" flag
Issue
[root@rhel-80 ~]# nft add table ip filter
[root@rhel-80 ~]# nft add chain ip filter input { type filter hook input priority 0 \; }
[root@rhel-80 ~]# nft add set ip filter blacklist { type ipv4_addr \; flags dynamic, timeout \; timeout 5m \; }
Error: syntax error, unexpected string, expecting constant or interval or timeout
add set ip filter blacklist { type ipv4_addr ; flags dynamic, timeout ; timeout 5m ; }
Environment
- Red Hat Enterprise Linux 8
- nftables-0.9.0-8.el8.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.