I don't receive a copy of my posts so I can't answer it. Sorry about
starting a new thread. Perhaps you can combine this with the original.

Using some fairly tedious detective work, I've answered the question I
posed in 'nftables firewall'

The option in the kernel .config file is CONFIG_NFT_LIMIT
If you set it to m, it creates nft_limit.ko.xz but then I had to load
it for it to work. So best to set it to y I think.

These three commands in nftables.conf:

        ip protocol icmp limit rate 1/second accept
        ip6 nexthdr ipv6-icmp limit rate 1/second accept
        ip protocol igmp limit rate 1/second accept

are now dealt with successfully.

jb
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to