Proper way to use counters for a specific child chain

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Do 'counters' work inside child chains when using 'jump' and 'goto'
statements when I want to only count matches to the full ruleset
inside the child chain?

https://wiki.nftables.org/wiki-nftables/index.php/Counters does not
explain if this is feasible or possible.

My use case: I have a base chain which then uses 'jump' statements to
a children chain which has a more complete rule. Example:

chain child {
ip saddr 1.2.3.4 ip daddr 1.1.1.1 tcp dport 22 accept
}

I wanted to count all hits to 'ip saddr 1.2.3.4 ip daddr 1.1.1.1 tcp
dport 22 accept' - I did not see any 'accept' in the example
documentation, if I replace "accept" above with "counter" does it
result in an implicit accept verdict?

Thanks



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux