Hey there!

If some of you could maybe answer me a question about iptables, that would be great. Link to the full question below.

To summarize it, I have a sub-chain which matches packets using hashlimit and if this traffic is below 100 pps from that IP, it returns back to the INPUT chain, else the packet is dropped.

There is only one thing I don't get, the rule in the INPUT chain which jumps to my sub-chain matches a lot more packets then all my sub-chain rules together! Where do these packets go? It's like they don't match anything after that jump.

I asked this question on serverfault so here goes the link: https://serverfault.com/questions/...