Repository navigation
v1.57.0
New error smell for rates the front-end does not read — and the two front-ends disagree about the unit:
limit-rate-invalid— iptables (--limit,--hashlimit-upto/-above) takes any prefix of second/minute/hour/day in any case (5/min,5/Sec, a bare5) but refuses plurals (5/minutes),5/hr,5/week,0/s,five/minand rates above 10,000/s (-m limit) or 1,000,000/s (hashlimit). nft takes second, minute, hour, day or week spelled out in lower case —5/mincopied from iptables is a syntax error, and0/secondis refused by the kernel. Each finding names the fix and says when the spelling is the other syntax's.
Measured with real loads (iptables 1.8.11 nf_tables and legacy, ip6tables, nftables 1.1.3 and 1.1.6). New samples iptables-limit-rate-plural.txt and nft-limit-rate-abbrev.txt, refused as shipped and loading once fixed, in the Load sample dropdown. The README release line had drifted to "67 smells" with two missing — fixed, and a test now pins it to the linter. 70 smells, tests 363. (#80)