Hi all Reading https://wiki.nftables.org/wiki-nftables/index.php/Quotas I have been testing quota but I have a doubt. a) If I use this rule below , quota reaches its value, but download continues. insert rule inet filter FORWARD ip daddr 192.168.10.11 quota until 2 mbytes counter accept comment "paulo-quota" nft list ruleset | grep 'paulo-quota' ip daddr 192.168.10.11 quota 2 mbytes used 2 mbytes counter packets 1074 bytes 2094663 accept comment "paulo-quota" b) But if I invert logic, download stops. insert rule inet filter FORWARD ip daddr 192.168.10.11 quota over 2 mbytes counter drop comment "paulo-quota" debian-10.10.0-amd64-netinst.iso https://gemmei.ftp.acc.umu.se/debian-cd/current/amd64/iso-cd/debian-10.10.0-amd64-netinst.iso 0 B/s - 22,9 MB de 336 MB Should a) have the same result as b) ? Ubuntu 20.04.2 5.4.0-47-generic #51-Ubuntu SMP nftables 0.9.3-2 Thanks in advanced -- Paulo Ricardo Bruck consultor
