diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-01-29 15:22:02 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-01-29 15:24:00 +0100 |
| commit | 6990bbc5a76eee6683d228ec5c5e4e580b6208d5 (patch) | |
| tree | 35218790683422d4a977547e7696ad9313fc37b5 /extensions/libxt_policy.c | |
| parent | 13ecaeb0f28158dfe11bd7577cd483d86de23983 (diff) | |
extensions: hashlimit: remove space before burst in translation to nft
Fixes the following test:
# python xlate-test.py extensions/libxt_hashlimit.txlate
extensions/libxt_hashlimit.txlate: Fail
src: iptables-translate -A OUTPUT -m tcp -p tcp --dport 443 -m hashlimit --hashlimit-upto 300 --hashlimit-burst 15 --hashlimit-mode srcip,dstip --hashlimit-name https --hashlimit-htable-expire 300000 -m state --state NEW -j DROP
exp: nft add rule ip filter OUTPUT tcp dport 443 meter https { ip daddr . ip saddr timeout 300s limit rate 300/second burst 15 packets} ct state new counter drop
res: nft add rule ip filter OUTPUT tcp dport 443 meter https { ip daddr . ip saddr timeout 300s limit rate 300/second burst 15 packets} ct state new counter drop
1 test file, 2 tests, 1 tests passed, 1 tests failed, 0 errors
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_policy.c')
0 files changed, 0 insertions, 0 deletions