Default action for packets exceeding the limiter (default: drop) continue drop ok reclassify pipe continue Don't do anything, just continue with the next action in line drop Drop the packet immediately ok Accept the packet reclassify Treat the packet as non-matching to the filter this action is attached to and continue with the next filter in line (if any) pipe Pass the packet to the next action in line (continue|drop|ok|reclassify|pipe) drop Default action for packets not exceeding the limiter (default: ok) continue drop ok reclassify pipe continue Don't do anything, just continue with the next action in line drop Drop the packet immediately ok Accept the packet reclassify Treat the packet as non-matching to the filter this action is attached to and continue with the next filter in line (if any) pipe Pass the packet to the next action in line (continue|drop|ok|reclassify|pipe) ok