ahill/nftables
1
0
Fork 0
mirror of https://git.netfilter.org/nftables synced 2026-01-26 10:34:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

doc: minor improvements with respect to the term “ruleset”

Browse Source 
Statements are elements of rules. Non-terminal statement are in particular
passive with respect to their rules (and thus automatically with respect to the
whole ruleset).

In “Continue ruleset evaluation”, it’s not necessary to mention the ruleset as
it’s obvious that the evaluation of the current chain will be continued.

Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>
Signed-off-by: Florian Westphal <fw@strlen.de>
This commit is contained in:
Christoph Anton Mitterer 2025-10-19 03:38:09 +02:00 committed by Florian Westphal
parent e0fe015343
commit d2c364b3db
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/nft.txt
View File

@ -932,7 +932,7 @@ actions, such as logging, rejecting a packet, etc. +
Statements exist in two kinds. Terminal statements unconditionally terminate
evaluation of the current rule, non-terminal statements either only
conditionally or never terminate evaluation of the current rule, in other words,
they are passive from the ruleset evaluation perspective. There can be an
they are passive from the rule evaluation perspective. There can be an
arbitrary amount of non-terminal statements in a rule, but only a single
terminal statement as the final statement.

2
doc/statements.txt
View File

@ -25,7 +25,7 @@ are not evaluated anymore for the packet.
*queue*:: Terminate ruleset evaluation and queue the packet to userspace.
Userspace must provide a drop or accept verdict. In case of accept, processing
resumes with the next base chain hook, not the rule following the queue verdict.
*continue*:: Continue ruleset evaluation with the next rule. This
*continue*:: Continue evaluation with the next rule. This
is the default behaviour in case a rule issues no verdict.
*return*:: Return from the current chain and continue evaluation at the
next rule in the last chain. If issued in a base chain, it is equivalent to the