Messages in this thread | | | Date | Wed, 11 Feb 2015 09:28:34 +0000 | From | Chris Vine <> | Subject | xt_recent broken in kernel 3.19.0 |
| |
With kernel 3.19.0, the following iptables rule, where SSH_TRIES is set to 4:
iptables -D SSH_CHAIN -m conntrack --ctstate NEW \ -m recent --update --seconds $SSH_LOGIN_PERIOD --hitcount $SSH_TRIES -j DROP
generates this error message in syslog:
kernel: xt_recent: hitcount (4) is larger than packets to be remembered (4) for table DEFAULT
and the rule fails to install in the table. No error is generated with kernel 3.18.6.
Chris
| |