[Bug 1061] New: net-firewall/nftables-0.5-r2: limit rate: burst parameter doesn't work
bugzilla-daemon at netfilter.org
bugzilla-daemon at netfilter.org
Sat Apr 2 17:12:11 CEST 2016
https://bugzilla.netfilter.org/show_bug.cgi?id=1061
Bug ID: 1061
Summary: net-firewall/nftables-0.5-r2: limit rate: burst
parameter doesn't work
Product: nftables
Version: unspecified
Hardware: x86_64
URL: http://wiki.nftables.org/wiki-nftables/index.php/Rate_
limiting_matchings
OS: Gentoo
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: alexander.meinhardt+forum at gmail.com
Wanted to use the "burst"-parameter in "limit rate" of nftables, but it doesn't
work.
nft add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
<cmdline>:1:95-101: Error: syntax error, unexpected packets, expecting end of
file or newline or semicolon
add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
^^^^^^^
Official commit
(http://git.netfilter.org/nftables/commit/?id=174f4a120ec7644531728621cfab5ce7fdb481c3)
requires a kernel >= 4.3-rc1.
Is it possible, that the snapshot from nftables v0.5 doesn't contain the
burst-function? Is there any newer snapshot than "9999" (live) available!?
I'm using:
sys-kernel/gentoo-sources-4.5.0-r1
+symlink -build -experimental -kdbus
net-firewall/nftables-0.5-r2
+readline -debug -gmp
net-libs/libnftnl-1.0.5
-examples -json -static-libs -test -xml
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160402/f9b9a804/attachment.html>
More information about the netfilter-buglog
mailing list