vidhar: nftables: named reject limit

1 files changed, 4 insertions, 6 deletions

diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index ae3bb694..5263f97e 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -1,6 +1,6 @@
 table inet filter {
-  chain reject-rl {
-    limit rate over 1000 / second burst 1000 packets counter drop
+  limit lim_reject {
+    rate over 1000 / second burst 1000 packets
   }
 
 
@@ -17,11 +17,10 @@ table inet filter {
     meta l4proto igmp counter accept
 
 
+    limit name lim_reject log prefix "drop forward: " counter drop
     log prefix "reject forward: " counter
-    jump reject-rl
     meta l4proto tcp ct state new counter reject with tcp reset
     ct state new counter reject
-    counter
   }
 
   chain input {
@@ -46,11 +45,10 @@ table inet filter {
     meta l4proto igmp counter accept
 
 
+    limit name lim_reject log prefix "drop input: " counter drop
     log prefix "reject input: " counter
-    jump reject-rl
     meta l4proto tcp ct state new counter reject with tcp reset
     ct state new counter reject
-    counter
   }
 
   chain output {