pauloric@xxxxxxxxxxxxxxxx <pauloric@xxxxxxxxxxxxxxxx> wrote: > I think that I find the 'error'. > > Quota follows same rules that limit? > > https://wiki.nftables.org/wiki-nftables/index.php/Rate_limiting_matchings Yes, they do not 'drop' packets when the quota expires, it just stops matching (or starts matching, depending wheter its 'until' or 'over' mode).