I don't receive a copy of my posts so I can't answer it. Sorry about starting a new thread. Perhaps you can combine this with the original.
Using some fairly tedious detective work, I've answered the question I posed in 'nftables firewall' The option in the kernel .config file is CONFIG_NFT_LIMIT If you set it to m, it creates nft_limit.ko.xz but then I had to load it for it to work. So best to set it to y I think. These three commands in nftables.conf: ip protocol icmp limit rate 1/second accept ip6 nexthdr ipv6-icmp limit rate 1/second accept ip protocol igmp limit rate 1/second accept are now dealt with successfully. jb -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page