[LARTC] patching iptables for connlimit

[LARTC] patching iptables for connlimit

[Petre Bandac]

[-- Attachment #1.1: Type: text/plain, Size: 246 bytes --]

hallo

the patch described at

http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.5

works for the FORWARD chain as well ?

thanks,

petre

-- 

Petre Bandac

Network Scientist

-
petre@kgb.ro

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 187 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] patching iptables for connlimit

[Andrew Beverley]

> the patch described at
> 
> http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.5
> 
> works for the FORWARD chain as well ?

Yes I've just tried it and it works fine.

If you want to use connlimit and you're using a recent kernel you'll need to take 
a look at the netfilter users mailing list for details on how to use connlimit 
with it. Take a look at:

http://lists.netfilter.org/pipermail/netfilter/2006-July/066227.html

and also the thread index for the other messages. Unfortunately the thread is 
split up into several places in the index.

Andy Beverley

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc