templates: allow inverted limits

[saldry]

Translate inverted limits to nft limit rate over which specifies that the rule is matching packets over the rate limit.

[brada4]

Why dont you add a single bool parameter that limit is in reverse? Same lines already touched...

[saldry]

Why dont you add a single bool parameter that limit is in reverse? Same lines already touched...

I didn't realize that approach. I'll try it later...

[saldry]

Updated. Please check :) @brada4

[brada4]

You need to load new parameter in root/usr/share/ucode/fw4.uc
Maybe call it limit_over to not invent new nomenclature?

[saldry]

You need to load new parameter in root/usr/share/ucode/fw4.uc

firewall4/root/usr/share/ucode/fw4.uc

Lines 1302 to 1330 in b6e5157

	parse_invert: function(val) {
	if (val == null)
	return null;
	let rv = { invert: false };
	rv.val = trim(replace(val, /^[ \t]*!/, () => (rv.invert = true, '')));
	return length(rv.val) ? rv : null;
	},
	parse_limit: function(val) {
	let rv = this.parse_invert(val);
	let m = rv ? match(rv.val, /^([0-9]+)(\/([a-z]+))?$/) : null;
	if (!m)
	return null;
	let n = +m[1];
	let u = m[3] ? this.parse_enum(m[3], [ "second", "minute", "hour", "day" ]) : "second";
	if (!u)
	return null;
	rv.rate = n;
	rv.unit = u;
	return rv;
	},

I'm afraid I don't quite understand what you mean. limit.invert/rv.invert is available since parse_limit and parse_invert. And it works well in my tests.