[Ferm] Parser error or user error ...

Bret Giddings bretgiddings at gmail.com
Thu Dec 31 13:15:42 CET 2015


Hello,

The following (somewhat contrived) snippet results in a warning message of

Warning in test.ferm line 16: Chain is already specified

table filter {
    chain FORWARD {
        policy DROP;
        # connection tracking
        mod state state INVALID DROP;
        mod state state (ESTABLISHED RELATED) ACCEPT;

        interface eth0 outerface eth1 @subchain eth0.eth1 {
                chain dns {
                        daddr 1.2.3.4 ACCEPT;
                        daddr 5.6.7.8 ACCEPT;
                }
                protocol (udp tcp) dport 53 realgoto dns;
        }
    }
}

This appears to be related to ferm detecting that the subchain
ethic.eth1 is defined twice - however, I can't see that it is.

Am i doing something wrong or is this a harmless parser bug?

Regards,

Bret


More information about the Ferm mailing list