diff options
author | Florian Westphal <fw@strlen.de> | 2018-04-16 19:52:58 +0300 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-04-24 11:29:21 +0300 |
commit | 99a0efbeeb83482893f7d5df343a2d2eb591933d (patch) | |
tree | f7235e3c30479ff5c7ad69f75880521e43089f82 /net/bridge | |
parent | 8e1102d5a1596dca10f51e3de800809944f8816d (diff) | |
download | linux-99a0efbeeb83482893f7d5df343a2d2eb591933d.tar.xz |
netfilter: nf_tables: always use an upper set size for dynsets
nft rejects rules that lack a timeout and a size limit when they're used
to add elements from packet path.
Pick a sane upperlimit instead of rejecting outright.
The upperlimit is visible to userspace, just as if it would have been
given during set declaration.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/bridge')
0 files changed, 0 insertions, 0 deletions