[nftables] log flood protection?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



kernel 5.9.0-rc6 armv7l | nft 0.9.6
_____

Trying to limit log entries as a preventive measure for log flooding with

log flags all prefix "foo DROP: " limit rate 1/second

however that does not work, i.e. the specified rate is not observed and more than 1 line / packet per sec is being printed.

Unless missed it there is nothing in the wiki or man about it, man (section LIMIT STATEMENT) only stating:

>It can be used in combination with the log statement to give limited logging

but unfortunately no syntax sample.

How to implement log flooding protection?





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux