Re: Connlimit and linux-2.6.17

[Andrew Beverley <andy@andybev.com>]

> I got similar problems after I moved to 2.6.17.6 from 2.6.14
> I've downloaded latest POM and patched kernel manually
> I didn't notice if there were any warnings when building kernel.

I suspect the warnings I got means it's got problems - but I am not a C programmer!

The code in question is the highlighted lines below:

static struct ipt_match connlimit_match = {
         .name = "connlimit",
         .match = &match,               <--
         .checkentry = &check,          <--
         .destroy = &destroy,           <--
         .me = THIS_MODULE
};

> This is what I get when I try to use connlimit match
 >
> iptables: Unknown error 18446744073709551615

I was getting a very similar error when using iptables 1.3.5. The error changed to 
"iptables: Invalid argument" when I used iptables-1.3.5-20060508.

> and, finally dmesg tells me:
> 
> ip_tables: connlimit match: invalid size 0 != 24
> ip_tables: connlimit match: invalid size 0 != 24

I get 'connlimit match: invalid size 0 != 16'

I will email netfilter-devel and see if I can get an answer there. It looks like 
no one is maintaining connlimit - last date in the code is 2002!

Andy Beverley