Re: What should happen when the size of a nftables set is reached?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: What should happen when the size of a nftables set is reached?
From: Mikhail Morfikov <mmorfikov@xxxxxxxxx>
Date: Thu, 2 May 2019 00:08:52 +0200
Cc: netfilter@xxxxxxxxxxxxxxx
In-reply-to: <20190501152148.vedvnmt4pbdzwl5o@salvia>
Openpgp: preference=signencrypt
References: <058df2e5-857e-97d8-bfc7-bbee939ff2f5@gmail.com> <d861ea8a-7ee0-5612-fdff-688ffd775a5c@gmail.com> <20190430205414.7xohz25lmagz3iqd@salvia> <fc4b75c5-648b-79d4-e536-c3b65d55feeb@gmail.com> <20190501081734.szht7wef6whlyejx@salvia> <0825f060-6db0-fbf9-a976-a4e437d59b76@gmail.com> <20190501152148.vedvnmt4pbdzwl5o@salvia>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1

On 01/05/2019 17:21, Pablo Neira Ayuso wrote:
> We can add a catch all element, in case there is no matching.
> 
> So users can define default action in case no match / set is full.

I think it will suffice.

Attachment: signature.asc
Description: OpenPGP digital signature

References:
- What should happen when the size of a nftables set is reached?
  - From: Mikhail Morfikov
- Re: What should happen when the size of a nftables set is reached?
  - From: Mikhail Morfikov
- Re: What should happen when the size of a nftables set is reached?
  - From: Pablo Neira Ayuso
- Re: What should happen when the size of a nftables set is reached?
  - From: Mikhail Morfikov
- Re: What should happen when the size of a nftables set is reached?
  - From: Pablo Neira Ayuso
- Re: What should happen when the size of a nftables set is reached?
  - From: Mikhail Morfikov
- Re: What should happen when the size of a nftables set is reached?
  - From: Pablo Neira Ayuso

Prev by Date: Re: What should happen when the size of a nftables set is reached?
Next by Date: Using SYN Proxy to protect servers that have different wscale
Previous by thread: Re: What should happen when the size of a nftables set is reached?
Next by thread: iptables: undefined symbol: xtables_find_target_revision
Index(es):
- Date
- Thread

[Index of Archives] [Linux Netfilter Development] [Linux Kernel Networking Development] [Netem] [Berkeley Packet Filter] [Linux Kernel Development] [Advanced Routing & Traffice Control] [Bugtraq]