| Message ID | 20240110043059.2977387-1-tianquan23@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [nftables] doc: clarify reject is supported at prerouting stage | expand |
On Wed, Jan 10, 2024 at 04:30:59AM +0000, Quan Tian wrote: > It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce > support for reject at prerouting stage"). Applied, thanks
diff --git a/doc/statements.txt b/doc/statements.txt index 19672805..ae6442b0 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -180,7 +180,7 @@ ____ A reject statement is used to send back an error packet in response to the matched packet otherwise it is equivalent to drop so it is a terminating statement, ending rule traversal. This statement is only valid in base chains -using the *input*, +using the *prerouting*, *input*, *forward* or *output* hooks, and user-defined chains which are only called from those chains.
It's supported since kernel commit f53b9b0bdc59 ("netfilter: introduce support for reject at prerouting stage"). Reported-by: Dan Winship <danwinship@redhat.com> Signed-off-by: Quan Tian <tianquan23@gmail.com> --- doc/statements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)