Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@netfilter.org>
To: pauloric@contatogs.com.br
Cc: netfilter@vger.kernel.org
Subject: Re: manual : CONNTRACK EXPRESSIONS
Date: Fri, 23 Jul 2021 17:00:43 +0200	[thread overview]
Message-ID: <20210723150043.GA16034@salvia> (raw)
In-Reply-To: <328573485.4.1626983857363.JavaMail.zimbra@contatogs.com.br>

Hi,

On Thu, Jul 22, 2021 at 04:57:37PM -0300, pauloric@contatogs.com.br wrote:
> Hi
> 
> Near  CONNTRACK EXPRESSIONS at manual I think that should be good to insert something like:
> 
> ct {state | direction | status | mark | expiration | helper | label}
> ....
> ct count [over]    <------->
> 
> and just a little bellow it has already an example of it.
> ...
> filter input tcp dport 22 meter test { ip saddr ct count over 2 } reject
> 
> Maybe a include at Table 55. Conntrack expressions  too ??? <----

Since 0.9.7, manpage contains a reference to 'ct count'.

There is also an example usage:

       restrict the number of parallel connections to a server.

           nft add set filter ssh_flood '{ type ipv4_addr; flags dynamic; }'
           nft add rule filter input tcp dport 22 add @ssh_flood '{ ip saddr ct count over 2 }' reject

> Could it be inserted at https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes#Ct    ???

Updated.

Thanks

      reply	other threads:[~2021-07-23 15:00 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-03-31 17:47 nft show counter Frank Wunderlich
2021-03-31 21:23 ` Frank Myhr
2021-03-31 21:40 ` Florian Westphal
2021-03-31 23:08   ` Frank Myhr
2021-04-01  8:08     ` Aw: " Frank Wunderlich
2021-04-01 16:42       ` Anton Rieger
2021-04-02 17:16         ` Frank Myhr
2021-04-02 17:42           ` Frank Wunderlich
2021-04-03 17:04             ` Frank Myhr
2021-04-02 22:22           ` Anton Rieger
2021-04-01 18:14       ` Florian Westphal
2021-04-01 18:31         ` Frank Wunderlich
2021-04-01 20:03           ` Florian Westphal
2021-04-02 11:58         ` Aw: " Frank Wunderlich
2021-04-02 17:10           ` Frank Myhr
2021-04-01 18:21     ` Florian Westphal
2021-07-22 19:57   ` manual : CONNTRACK EXPRESSIONS pauloric
2021-07-23 15:00     ` Pablo Neira Ayuso [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210723150043.GA16034@salvia \
    --to=pablo@netfilter.org \
    --cc=netfilter@vger.kernel.org \
    --cc=pauloric@contatogs.com.br \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox