How to Create Additional Sets about geo-nft HOT 3 CLOSED

Hello,

Your new sets named 'geo-channel4' and 'geo-channel6' in refill-sets.conf needs to match set names defined in your main table in /etc/nftables.conf. Since your sets are in table inet filter, your set definitions in /etc/nftables.conf would look something like this:

  # Define empty set to store IPv4 country code specific address ranges.
  set geo-channel4 {
    type ipv4_addr
    flags interval
    # Elements for this set are defined in /etc/nftables/geo-nft/refill-sets.conf
  }

  # Define empty set to store IPv6 country code specific address ranges.
  set geo-channel6 {
    type ipv6_addr
    flags interval
    # Elements for this set are defined in /etc/nftables/geo-nft/refill-sets.conf
  }

Each set name defined in refill-sets.conf needs to match the table and set name defined in your main ruleset in /etc/nftables.conf. Sets should be defined at the beginning of the table, before or after any sets that may be there. These sets are defined empty, and will be filled when the refill-sets.nft script is run by the main geo-nft.sh script. You can verify that the sets are created by listing your ruleset:

sudo nft list ruleset

I'll clarify the error message to state that the define line does not point to a valid nftables set name defined in /etc/nftables.conf. You can use the Discussions link at the top of the page to ask additional questions if needed. Let me know how it goes.

Thanks.

from geo-nft.

I did have the lines the in the /etc/nftables.conf and even copied and pasted the above but it still gives that error.
I've moved over to Discussions too if that's the correct place.
FYI: Debian 11

Thanks

from geo-nft.

I'll go ahead and close this since it's been moved to Discussions #18.

Thank you

from geo-nft.