Action of 'flush ruleset' at head of 'nftables.conf' is delayed or defective resulting in error

I changed devices and am now testing nftables the stable release version

https://downloads.openwrt.org/releases/18.06.2/targets/x86/64/
OpenWrt 18.06.2, r7676-cddd7b4c77
Linux OpenWrt 4.14.95 #0 SMP Mon Jan 28 08:54:32 2019 x86_64 GNU/Linux

on a PC Engines apu2d4 board.

The same problem occurred, but I found an ad hoc workaround. At the top of nft file to load replace

flush ruleset

with

table ip nat
table ip mangle
table ip filter
flush table ip nat
flush table ip mangle
flush table ip filter

This will work both when the various tables are or are not present before loading the rules.

1 Like