All of lore.kernel.org
 help / color / mirror / Atom feed
* maximum number of iptables rules?
@ 2003-11-12 23:40 px
  2003-11-13  1:12 ` pptp broken after POM John Paul
  0 siblings, 1 reply; 6+ messages in thread
From: px @ 2003-11-12 23:40 UTC (permalink / raw)
  To: netfilter; +Cc: dom

Hi, me and a buddy of mine are working on a perl script to automate
blocking of about 3000 IP addresses.
The script works fine on his box, x86.  But on my box, sparc, I seem to
have a limitation of 854 rules before I start to get errors and am
unable to add anymore rules.
Is there a maximum number of rules per chain? or overall?


Here is the information on my Sparc box.

> null:~# iptables -t filter -I INPUT 1 -s 66.28.224.0/19 -p all -j blockme
> iptables: Memory allocation problem


> null:~# iptables -t filter -I INPUT 1 -s 1.2.3.4/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# uname -a
> Linux null 2.4.21 #1 Thu Aug 7 20:30:12 EDT 2003 sparc64 GNU/Linux
> null:~#

> null:~# iptables -L blockme
> Chain blockme(854 references)
> target     prot opt source               destination
> DROP       all  --  anywhere             anywhere


Here is the info about my buddy's. x86 box

>  root@darkside:/etc/rc.d# uname -a; iptables -L blockme; iptables 
> --version
>  Linux darkside 2.5.50-ac1 #3 SMP Sun Feb 9 10:21:53 PST 2003 i686 
> unknown
>  Chain blockme(3966 references)
>  target     prot opt source               destination          
>  DROP       all  --  anywhere             anywhere            
>  iptables v1.2.7a



Any help is greatly appreciated.
-r0b

PS.
Wow, I'm sorry forgot to put that.  Im spacey today.
My friends x86 linux box has, 256
My sparc box has 512.
-r0b




^ permalink raw reply	[flat|nested] 6+ messages in thread
* maximum number of iptables rules?
@ 2003-11-12 23:18 px
  2003-11-12 23:25 ` Antony Stone
  0 siblings, 1 reply; 6+ messages in thread
From: px @ 2003-11-12 23:18 UTC (permalink / raw)
  To: netfilter; +Cc: dom

Hi, me and a buddy of mine are working on a perl script to automate 
blocking of about 3000 IP addresses.
The script works fine on his box, x86.  But on my box, sparc, I seem to 
have a limitation of 854 rules before I start to get errors and am 
unable to add anymore rules.
Is there a maximum number of rules per chain? or overall?
 

Here is the information on my Sparc box.

> null:~# iptables -t filter -I INPUT 1 -s 66.28.224.0/19 -p all -j blockme
> iptables: Memory allocation problem


> null:~# iptables -t filter -I INPUT 1 -s 1.2.3.4/19 -p all -j blockme
> iptables: Memory allocation problem
> null:~# uname -a
> Linux null 2.4.21 #1 Thu Aug 7 20:30:12 EDT 2003 sparc64 GNU/Linux
> null:~#

> null:~# iptables -L blockme
> Chain blockme(854 references)
> target     prot opt source               destination
> DROP       all  --  anywhere             anywhere


Here is the info about my buddy's. x86 box

>  root@darkside:/etc/rc.d# uname -a; iptables -L blockme; iptables 
> --version
>  Linux darkside 2.5.50-ac1 #3 SMP Sun Feb 9 10:21:53 PST 2003 i686 
> unknown
>  Chain blockme(3966 references)
>  target     prot opt source               destination          
>  DROP       all  --  anywhere             anywhere            
>  iptables v1.2.7a



Any help is greatly appreciated.
-r0b




^ permalink raw reply	[flat|nested] 6+ messages in thread
end of thread, other threads:[~2003-11-13  2:31 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-11-12 23:40 maximum number of iptables rules? px
2003-11-13  1:12 ` pptp broken after POM John Paul
2003-11-13  2:17   ` Michael Kearey
2003-11-13  2:31   ` John Paul
  -- strict thread matches above, loose matches on Subject: below --
2003-11-12 23:18 maximum number of iptables rules? px
2003-11-12 23:25 ` Antony Stone

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.