nftables rule: No such file or directory error

Question

I am trying to apply below nftables rule which I adopted from this guide:

nft add rule filter INPUT tcp flags != syn counter drop

somehow this is ending up with:

Error: Could not process rule: No such file or directory

Can anyone spot what exactly I might be missing in this rule?

score 12 · Accepted Answer · answered Aug 28 '19 at 19:15

12

You're probably missing your table or chain.

nft list ruleset

will give you what you are working with. If it prints out nothing, you're missing both.

nft add table ip filter # create table
nft add chain ip filter INPUT { type filter hook input priority 0 \; } # create chain

Then you should be able to add your rule to the chain.

NOTE: If you're logged in with ssh, your connection will be suspended.

answered Aug 28 '19 at 19:15

Vivian

When I ran the `INPUT` one, I got `zsh: parse error near \`}'`. This can be fxed by adding another backslash in front of the closing curly bracket. Hope this helps someone! – ajmeese7 Apr 16 '23 at 01:27

score 3 · Answer 2 · answered Sep 06 '21 at 04:10

I was getting Error: Could not process rule: No such file or directory for nftables counter rules on an embedded Linux system built with Yocto.

In my case, the issue was due to kernel configuration. I had to enable the following:

This mailing list post helped me:

score 1 · Answer 3 · answered Sep 29 '21 at 16:53

1

In my case I needed CONFIG_NF_TABLES_INET=y.

answered Sep 29 '21 at 16:53

Alex Henrie

3 Answers3