Hi all,
I just recently updated nftables to v0.8.5. Everything was ok with my
ruleset in v0.8.2, but after update looks like timeout value is not
accepted in meters anymore:
./ruleset.nft:317:35-54: Error: Could not process rule: Not supported
ct state new meter DDoS { ip saddr timeout 10s limit rate over
50/second burst 50 packets } set add ip saddr @ddoser set add ip daddr
@ddosed log group 1 counter drop
^^^^^^^^^^^^^^^^^^^^
Rule above works if I remove 'timeout 10s'. Anyone else has the same issue?
/ Darius
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
