diff options
| author | Chenbo Feng <fengc@google.com> | 2018-10-02 03:23:08 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-10-03 11:32:54 +0200 |
| commit | e9837e55b0200da544a095a1fca36efd7fd3ba30 (patch) | |
| tree | 5672a29c2e09dcd6d47837b9d79405efaae4f49a /tools | |
| parent | netfilter: nf_tables: use rhashtable_lookup() instead of rhashtable_lookup_fa... (diff) | |
| download | linux-e9837e55b0200da544a095a1fca36efd7fd3ba30.tar.xz linux-e9837e55b0200da544a095a1fca36efd7fd3ba30.zip | |
netfilter: xt_quota: fix the behavior of xt_quota module
A major flaw of the current xt_quota module is that quota in a specific
rule gets reset every time there is a rule change in the same table. It
makes the xt_quota module not very useful in a table in which iptables
rules are changed at run time. This fix introduces a new counter that is
visible to userspace as the remaining quota of the current rule. When
userspace restores the rules in a table, it can restore the counter to
the remaining quota instead of resetting it to the full quota.
Signed-off-by: Chenbo Feng <fengc@google.com>
Suggested-by: Maciej Żenczykowski <maze@google.com>
Reviewed-by: Maciej Żenczykowski <maze@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions