Page MenuHomeVyOS Platform

firewall ipv6: nftables syntax error if 'recent' match option is set
Closed, ResolvedPublicBUG

Description

config:

set firewall ipv6 output filter default-action accept
set firewall ipv6 output filter rule 100 action drop
set firewall ipv6 output filter rule 100 recent count 10
set firewall ipv6 output filter rule 100 recent time minute

commit error:

vyos@vyos commit
[ firewall ]
Fail to apply firewall Error found on: firewall ipv6 output filter rule
100         Error message: syntax error, unexpected string, expecting {
[[firewall]] failed
Commit failed

Extra space in 'OUT_ ' creates invalid set name - https://github.com/vyos/vyos-1x/blob/current/data/templates/firewall/nftables.j2#L284

Details

Version
2026.03.14-0024-rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)