lkml.org 
[lkml]   [2015]   [Feb]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subjectxt_recent broken in kernel 3.19.0
With kernel 3.19.0, the following iptables rule, where SSH_TRIES is set
to 4:

iptables -D SSH_CHAIN -m conntrack --ctstate NEW \
-m recent --update --seconds $SSH_LOGIN_PERIOD --hitcount $SSH_TRIES -j DROP

generates this error message in syslog:

kernel: xt_recent: hitcount (4) is larger than packets to be
remembered (4) for table DEFAULT

and the rule fails to install in the table. No error is generated with
kernel 3.18.6.

Chris


\
 
 \ /
  Last update: 2015-02-11 10:41    [W:0.063 / U:0.084 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site