Re: nft error Could not process rule: No buffer space available

Pablo Neira Ayuso <[email protected]> Mon, 25 Aug 2025 12:16:46 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <aKw4DikLFS8MVGVY@calendula>
Hi,

On Sun, Aug 24, 2025 at 04:18:50PM +0800, lilydjwg wrote:
> I'm switching from iptables+ipset to nftables, and as part of it, I need to
> import a set containing ~2400 IPv6 networks. The file looks like this:

What nftables version are you using?

> define elems = {
>   2001:123::/31,
>   ...
> }
> 
> table ip6 mytable {
>   set myset {
>     type ipv6_addr
>     flags dynamic,interval
>     elements = $elems
>   }
>   chain output {
>     type route hook output priority -150;
>     ... ip6 daddr @myset reject
>   }
> }
> 
> And then "nft -f myfile.nft" fails with
> 
> netlink: Error: Could not process rule: No buffer space available
> 
> -- 
> Best regards,
> lilydjwg
>