小编met*_*ter的帖子

nftables 规则的默认判决是什么?

例如:

#!/usr/sbin/nft -f

add table ip filter_4

add chain ip filter_4 input {
    type filter hook input priority filter; policy drop;
}

add chain ip filter_4 new_in_4 {
    comment "New input IPv4 traffic"
}

# Note it's goto not jump! (thus no way out of new_in_4 chain)
add rule ip filter_4 input ct state new goto new_in_4

# Is this block drop or accept rule?
add rule ip filter_4 new_in_4 log prefix "some comment: "
Run Code Online (Sandbox Code Playgroud)

该规则没有明确acceptdrop判决,那么哪个是默认的?

linux nftables

3
推荐指数
1
解决办法
330
查看次数

标签 统计

linux ×1

nftables ×1