]> git.ipfire.org Git - thirdparty/nftables.git/commit
datatype: reject rate in quota statement
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 14 Aug 2024 11:02:02 +0000 (13:02 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 19 Aug 2024 15:24:12 +0000 (17:24 +0200)
commit8ed6fa6d66b2df50d118423c1cb0e98cdd45cdbd
treedbe890f64fe47705e4f212ce61f0c4aae42a9dc8
parent620acb1f643c59869163f964171f73de45598199
datatype: reject rate in quota statement

Bail out if rate are used:

 ruleset.nft:5:77-106: Error: Wrong rate format, expecting bytes or kbytes or mbytes
 add rule netdev firewall PROTECTED_IPS update @quota_temp_before { ip daddr quota over 45000 mbytes/second } add @quota_trigger { ip daddr }
                                                                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

improve error reporting while at this.

Fixes: 6615676d825e ("src: add per-bytes limit")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/datatype.c