Re: match limit with inverse [!]

[Jerome de Vivie <jerome.de-vivie@wanadoo.fr>]

Your out of luck. The patch hasn't been applied because it a kernel
header and could disturb older versions of netfilter. The patch is under
http://perso.wanadoo.fr/jerome.de-vivie/ipt/

I hope that core maintainer could applied it now.

Regards,

j.

"Graham- Reg.CA" wrote:
> 
> Hello,
> 
> Has the match limit with inverse [!] patch ever been applied to any of the
> newer versions of iptables/netfilter?
> 
> I have a number of DoS attack-type situations and a few special situations
> (such as limiting outgoing user traffic) that would really benefit from
> this.
> 
> Putting the exclamation mark in on the command line (as the man pages
> suggest) just seems to be ignored - so we end up dropping all packets below
> that threshold, not above it.
> 
> Just wondering if limit ever had the inverse patch (or similar) added to it,
> or if I'm out of luck :(
> 
> Running Kernel 2.4.18 and a pretty recent version of iptables.
> 
> Thanks!
>  - Graham.

-- 
Jérôme de Vivie