As-is, the rule does not drop the matching frames but redirects them to CPU. To actually drop them, you should use new-dst-ports=“” instead of redirect-to-cpu=yes.
As-is, the rule does not drop the matching frames but redirects them to CPU. To actually drop them, you should use new-dst-ports=“” instead of redirect-to-cpu=yes.