Getting errors when trying to alter a policy route rule or add a new one

[ngoehring]

Good evening,

I am using the most current version of VyOS 1.3 nightly. I have an existing policy based routing rule set defined for my LAN and, whenever I try to add another rule to it, or change the table in an existing rule, I get errors. The current one is:

[edit]
vyos@VyosOverseas# set policy route LAN_policy rule 200 set table 50
[edit]
    vyos@VyosOverseas# commit
    [ policy route LAN_policy ]
    iptables v1.8.2 (nf_tables): Chain 'VYATTA_PBR_50' does not exist
    Try `iptables -h' or 'iptables --help' for more information.
    iptables error: Inappropriate ioctl for device - -m comment --comment "LAN_policy-200"    -j VYATTA_PBR_50  at /opt/vyatta/sbin/vyatta-firewall.pl line 708.

    [[policy route LAN_policy]] failed
    Commit failed

I have tried removing the policy from my LAN interface and making the desired changes and still get errors. Anyone had this issue before and know what the fix is?

[ngoehring]

Oh and despite it saying table doesn’t exist, here it is:

table 50 {
interface-route 0.0.0.0/0 {
next-hop-interface wg20 {
}
}
}

[ngoehring]

restarted the router and tried again and this is the error this time:

[ policy route LAN_policy ]
iptables v1.8.2 (nf_tables): Chain 'VYATTA_PBR_50' does not exist
Try `iptables -h' or 'iptables --help' for more information.
Use of uninitialized value $rule_strs[1] in join or string at /opt/vyatta/sbin/vyatta-firewall.pl line 742.
Use of uninitialized value $rule_strs[2] in join or string at /opt/vyatta/sbin/vyatta-firewall.pl line 742.
Use of uninitialized value $rule_strs[3] in join or string at /opt/vyatta/sbin/vyatta-firewall.pl line 742.
Use of uninitialized value $rule_strs[4] in join or string at /opt/vyatta/sbin/vyatta-firewall.pl line 742.
Use of uninitialized value $rule_strs[5] in join or string at /opt/vyatta/sbin/vyatta-firewall.pl line 742.
iptables error: No such file or directory - -m comment --comment "LAN_policy-100"    -j VYATTA_PBR_50       at /opt/vyatta/sbin/vyatta-firewall.pl line 742.

[[policy route LAN_policy]] failed
Commit failed

[ngoehring]

Nevermind, looks like this is a known issue already

https://phabricator.vyos.net/T445

Workaround fix, while annoying, worked for me.