summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter_ipv6
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2018-01-03 15:36:14 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2018-01-04 10:54:03 +0100
commit0f387b070ae7630c47bd3daeb395d27a1214d4e9 (patch)
treeab69fc6d816bb908485b62a4e364302d1a233475 /include/linux/netfilter_ipv6
parent1ffe6a74b366e24f3394603982823ade3ae01d85 (diff)
extensions: hashlimit: fix incorrect burst in translations
iptables-translate -A INPUT -m tcp -p tcp --dport 80 -m hashlimit --hashlimit-above 200kb/s --hashlimit-burst 1mb --hashlimit-mode srcip,dstport --hashlimit-name http2 --hashlimit-htable-expire 3000 -j DROP shows: nft add rule ip filter INPUT tcp dport 80 flow table http2 { tcp dport . ip saddr timeout 3s limit rate over 200 kbytes/second burst 1 mbytes burst 6 packets} counter drop which prints burst twice, this is not correct. Reported-by: Duncan Roe <duncan_roe@optusnet.com.au> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/linux/netfilter_ipv6')
0 files changed, 0 insertions, 0 deletions