On Wed, 10 Apr 2024, at 6:23 PM, William N. wrote: > Hi, > > I am trying this (in Fedora 38 and Debian 12): > > https://wiki.nftables.org/wiki-nftables/index.php/Meters#Doing_connlimit_with_nft > > and I am getting this: > > ./connlimit-example:14:16-62: Error: Could not process rule: No such > file or directory > ct state new add @my_connlimit { ip saddr ct count over 20 } counter > drop > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > Why? For the avoidance of doubt, please show the complete ruleset that you are attempting to load. Additionally, compare the output of "uname -r" to the contents of the /lib/modules directory. Sometimes, people upgrade their kernels then forget to reboot before trying to load a ruleset that requires for one or more kernel modules to be newly loaded. -- Kerin Millar