On Fri, Apr 27, 2018 at 03:51:05PM +0800, 黄邦浪 wrote: [...] > # create a table named filter > nft add table filter > > # add chain for input(download) and output(upload) hook > nft add chain filter input { type filter hook input priority 0\;} > nft add chain filter output { type filter hook output priority 0\;} > > nft add rule filter input ip daddr 192.168.0.104 limit rate 512bytes/second accept > nft add rule filter output ip saddr 192.168.0.104 limit rate 512bytes/second accept > > Is there any problem with my nftables commands ? Any hits will be appreciated, thanks!!! What do you mean with "fails"? When adding the rule or you observe this doesn't work for you, ie. not ratelimiting as you expect? Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html