path: root/doc
diff options
authorPhil Sutter <>2018-05-15 17:34:30 +0200
committerFlorian Westphal <>2018-05-17 15:40:59 +0200
commitfc9566ff0adaceafae5687a3e719aa9a436915d5 (patch)
treef93261d633d22400e8c8abc097b8142e3e23883d /doc
parentbd92c25ac3e1c173f085f4bf502bed372d281e7a (diff)
nft.8: Document limitation of reject statement in bridge family
Bridge family allows reject statement in prerouting and input chains only. Users can't know without looking at kernel code. Signed-off-by: Phil Sutter <> Signed-off-by: Florian Westphal <>
Diffstat (limited to 'doc')
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/nft.xml b/doc/nft.xml
index 05193e67..cd6c012f 100644
--- a/doc/nft.xml
+++ b/doc/nft.xml
@@ -4873,6 +4873,10 @@ ip6 filter output log flags all
The common default reject value is
+ <para>
+ Note that in bridge family, reject statement is only allowed in base chains which
+ hook into <literal>input</literal> or <literal>prerouting</literal>.
+ </para>
<title>Counter statement</title>