branch: externals/nftables-mode
commit 78a1a4889837a25f5a5bff6a089bb8b262d5b133
Author: Trent W. Buck <trentb...@gmail.com>
Commit: Trent W. Buck <trentb...@gmail.com>

    cannot reject as default policy
    
    root@not-omega:~# nft 'add chain inet my_filter my_forward { type filter 
hook forward priority filter; policy reject; }'
    
    Error: syntax error, unexpected reject, expecting accept or drop
---
 nftables-host.nft | 1 -
 1 file changed, 1 deletion(-)

diff --git a/nftables-host.nft b/nftables-host.nft
index e944676225..5ff348a36d 100644
--- a/nftables-host.nft
+++ b/nftables-host.nft
@@ -101,7 +101,6 @@ table inet my_filter {
 
         # Finally, politely reject all other attempts.
         # Omit to use the default policy ("policy drop", above) instead.
-        # FIXME: can we simply do "policy reject" nowadays?
         reject
     }
 

Reply via email to