bugzilla-daemon at netfilter.org
2016-Apr-02 15:12 UTC
[Bug 1061] New: net-firewall/nftables-0.5-r2: limit rate: burst parameter doesn't work
https://bugzilla.netfilter.org/show_bug.cgi?id=1061
Bug ID: 1061
Summary: net-firewall/nftables-0.5-r2: limit rate: burst
parameter doesn't work
Product: nftables
Version: unspecified
Hardware: x86_64
URL: http://wiki.nftables.org/wiki-nftables/index.php/Rate_
limiting_matchings
OS: Gentoo
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: alexander.meinhardt+forum at gmail.com
Wanted to use the "burst"-parameter in "limit rate" of
nftables, but it doesn't
work.
nft add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
<cmdline>:1:95-101: Error: syntax error, unexpected packets, expecting end
of
file or newline or semicolon
add rule ip filter labor udp dport 33045 limit rate 3360/second burst 140
packets counter accept
^^^^^^^
Official commit
(http://git.netfilter.org/nftables/commit/?id=174f4a120ec7644531728621cfab5ce7fdb481c3)
requires a kernel >= 4.3-rc1.
Is it possible, that the snapshot from nftables v0.5 doesn't contain the
burst-function? Is there any newer snapshot than "9999" (live)
available!?
I'm using:
sys-kernel/gentoo-sources-4.5.0-r1
+symlink -build -experimental -kdbus
net-firewall/nftables-0.5-r2
+readline -debug -gmp
net-libs/libnftnl-1.0.5
-examples -json -static-libs -test -xml
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160402/f9b9a804/attachment.html>
bugzilla-daemon at netfilter.org
2016-Apr-11 09:36 UTC
[Bug 1061] net-firewall/nftables-0.5-r2: limit rate: burst parameter doesn't work
https://bugzilla.netfilter.org/show_bug.cgi?id=1061
am1 <alexander.meinhardt+forum at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
--- Comment #1 from am1 <alexander.meinhardt+forum at gmail.com> ---
Release of nftables is 0.5 and was released on 2015-09-16. This feature was
added on 2015-09-23.
Works with an update.
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160411/b6cd47cf/attachment.html>