search for: macdecod

...edTo: pablo at netfilter.org ReportedBy: anarey at gmail.com Estimated Hours: 0.0 The following command-line parameters of log, ulog and nflog of iptables-extensions are not supported in nft yet: --log-level level --log-tcp-sequence --log-tcp-options --log-ip-options --log-uid --log-macdecode --nflog-threshold size --nflog-range size --ulog-cprange size --ulog-qthreshold size The last commit in Pablo git tree of kernel is "40e6442 netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks" The last commit in libmnl repo is "090a842 examples: use mnl_socket_s...

...p -j DROP -A LDROP -m hashlimit --hashlimit-above 1/min --hashlimit-mode srcip,dstip --hashlimit-burst 1 --hashlimit-name logldrop --hashlimit-htable-expire 60000 -j DROP -A LDROP -m limit --limit 5/s -j LOG --log-prefix "NETFILTER drop " --log-tcp-options --log-ip-options --log-uid --log-macdecode -A LDROP -j DROP iptables-restore succeeds. then: # iptables -nvx --list LDROP Chain LDROP (4 references) pkts bytes target prot opt in out source destination 0 0 DROP udp -- * * 0.0.0.0/0 255.255.255.255...