diff options
| author | Phil Sutter <phil@nwl.cc> | 2018-05-15 17:34:30 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-05-17 15:40:59 +0200 |
| commit | fc9566ff0adaceafae5687a3e719aa9a436915d5 (patch) | |
| tree | f93261d633d22400e8c8abc097b8142e3e23883d /doc | |
| parent | bd92c25ac3e1c173f085f4bf502bed372d281e7a (diff) | |
nft.8: Document limitation of reject statement in bridge family
Bridge family allows reject statement in prerouting and input chains
only. Users can't know without looking at kernel code.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/nft.xml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/nft.xml b/doc/nft.xml index 05193e67..cd6c012f 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -4873,6 +4873,10 @@ ip6 filter output log flags all The common default reject value is <command>port-unreachable</command>. </para> + <para> + Note that in bridge family, reject statement is only allowed in base chains which + hook into <literal>input</literal> or <literal>prerouting</literal>. + </para> </refsect2> <refsect2> <title>Counter statement</title> |