Kind of a dumb question

[tmick 0]

I run the command

nft list tables

and I get this output:

table inet filter
table ip6 wg-quick-tun0
table ip wg-quick-tun0

So the question is why is there separate tables  for IP4 & IP6? Why not just have it be an inet connection?

[OpenSourcerer 1359]

Two tables with different addresses are probably easier to manage code-wise.

if (user wants v4) {
  write v4 netlock table;
}
else {
  write v4 block table;
};

if (user wants v6) {
  write v6 netlock table;
}
else {
  write v6 block table;
};

In the case of inet there exists the possibility of duplicate entries for which exception handling must be implemented.

I also think your question is a trifle. It doesn't matter if it's ip+ip6 or inet.

[tmick 0]

On 11/20/2022 at 3:21 PM, OpenSourcerer said:

I also think your question is a trifle. It doesn't matter if it's ip+ip6 or inet.

Well not really, if your trying to set up something to monitor the tables it's that much more you have to add. The question was out of curiosity (yes I know what that does to the cat) mostly. I'm learning NFTables and was trying to figure out why separate tables were used instead of  just the inet (which combines both IP Versions).