Re: nft error Could not process rule: No buffer space available
Pablo Neira Ayuso <[email protected]> Mon, 25 Aug 2025 12:16:46 +0200
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <aKw4DikLFS8MVGVY@calendula> |
Hi,
On Sun, Aug 24, 2025 at 04:18:50PM +0800, lilydjwg wrote:
> I'm switching from iptables+ipset to nftables, and as part of it, I need to
> import a set containing ~2400 IPv6 networks. The file looks like this:
What nftables version are you using?
> define elems = {
> 2001:123::/31,
> ...
> }
>
> table ip6 mytable {
> set myset {
> type ipv6_addr
> flags dynamic,interval
> elements = $elems
> }
> chain output {
> type route hook output priority -150;
> ... ip6 daddr @myset reject
> }
> }
>
> And then "nft -f myfile.nft" fails with
>
> netlink: Error: Could not process rule: No buffer space available
>
> --
> Best regards,
> lilydjwg
>