[Bug 1061] New: net-firewall/nftables-0.5-r2: limit rate: burst parameter doesn't work

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Sat Apr 2 17:12:11 CEST 2016


https://bugzilla.netfilter.org/show_bug.cgi?id=1061

            Bug ID: 1061
           Summary: net-firewall/nftables-0.5-r2: limit rate: burst
                    parameter doesn't work
           Product: nftables
           Version: unspecified
          Hardware: x86_64
               URL: http://wiki.nftables.org/wiki-nftables/index.php/Rate_
                    limiting_matchings
                OS: Gentoo
            Status: NEW
          Severity: major
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: alexander.meinhardt+forum at gmail.com

Wanted to use the "burst"-parameter in "limit rate" of nftables, but it doesn't
work.

nft add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
<cmdline>:1:95-101: Error: syntax error, unexpected packets, expecting end of
file or newline or semicolon
add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
                                                                         
^^^^^^^

Official commit
(http://git.netfilter.org/nftables/commit/?id=174f4a120ec7644531728621cfab5ce7fdb481c3)
requires a kernel >= 4.3-rc1.

Is it possible, that the snapshot from nftables v0.5 doesn't contain the
burst-function? Is there any newer snapshot than "9999" (live) available!?

I'm using:
sys-kernel/gentoo-sources-4.5.0-r1
+symlink -build -experimental -kdbus

net-firewall/nftables-0.5-r2
+readline -debug -gmp

net-libs/libnftnl-1.0.5
-examples -json -static-libs -test -xml

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160402/f9b9a804/attachment.html>


More information about the netfilter-buglog mailing list