Can't run meters example - "Could not process rule: Operation not supported"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
I'm trying to execute the example on
(https://wiki.nftables.org/wiki-nftables/index.php/Meters) / Using
meters:

nft add table my_filter_table
nft add chain my_filter_table my_input_chain {type filter hook input
priority 0\;}
nft add set my_filter_table my_ssh_meter { type ipv4_addr\; flags dynamic \;}
nft add rule my_filter_table my_input_chain tcp dport 22 ct state new
add @my_ssh_meter { ip saddr limit rate 10/second } accept

I'm getting the error:
Error: Could not process rule: Operation not supported
add rule my_filter_table my_input_chain tcp dport 22 ct state new add
@my_ssh_meter { ip saddr limit rate 10/second } accept
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The installation has been done from sources:

* Versions:
  - gmp: 6.1.2
  - readline: 8.0
  - libnftnl: 1.1.4
  - libmnl: 1.0.4
  - nft: 0.9.2

* The configure script for nft returned:
      nft configuration:
        cli support:                            yes
        enable debugging symbols:    yes
        use mini-gmp:                       no
        enable man page:                  yes
        libxtables support:                 no
        json output support:               no
        enable Python:                      yes (with /usr/bin/python)

* I've also tried with different versions of nft (0.9.2, 0.9.1). 0.9.0
gives me an error in the make process.
* installation instructions:
#  git checkout (version to install)
#  ./autogen.sh && ./configure && make && make check && (sudo) make install

I've readed in previous mails[1] this code works, but I don't know
what I'm doing wrong. ¿Does anyone have the same error? ¿Does anyone
know if my error is related to not supporting mini-gmp or libxtables?

[1] https://marc.info/?l=netfilter&m=156508925816504&w=2

Cheers,
Oscar




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux