diff options
| author |   Florian Westphal <fw@strlen.de> | 2018-04-16 18:52:58 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2018-04-24 10:29:21 +0200 |
| commit | 99a0efbeeb83482893f7d5df343a2d2eb591933d (patch) | |
| tree | f7235e3c30479ff5c7ad69f75880521e43089f82 /scripts/bpf_helpers_doc.py | |
| parent | netfilter: nf_tables: support timeouts larger than 23 days (diff) | |
| download | linux-dev-99a0efbeeb83482893f7d5df343a2d2eb591933d.tar.xz linux-dev-99a0efbeeb83482893f7d5df343a2d2eb591933d.zip | |
netfilter: nf_tables: always use an upper set size for dynsets
nft rejects rules that lack a timeout and a size limit when they're used
to add elements from packet path.
Pick a sane upperlimit instead of rejecting outright.
The upperlimit is visible to userspace, just as if it would have been
given during set declaration.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/bpf_helpers_doc.py')
0 files changed, 0 insertions, 0 deletions