From: justin <justin@dslr.net>
To: Ramin Dousti <ramin@cannon.eng.us.uu.net>
Cc: netfilter@lists.netfilter.org
Subject: Re[2]: iplimit module refuses to work
Date: Mon, 11 Aug 2003 17:47:20 -0400 [thread overview]
Message-ID: <162365409015.20030811174720@dslr.net> (raw)
In-Reply-To: <20030811183136.GD11900@cannon.eng.us.uu.net>
yes I do .. and other modules work just fine, as does the firewall.
The only problem is iplimit flunking out with this unknown error.
Its not even like its explaining what socket option is failing, nor are
there any console messages from the kernel as it rejects the bogus
socket option call.
Chain CloseY (1 references)
target prot opt source destination
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 1 hit_count: 10 name: Close side: source reject-with tcp-reset
DROP all -- 0.0.0.0/0 0.0.0.0/0
Chain OverX (0 references)
target prot opt source destination
all -- 0.0.0.0/0 0.0.0.0/0 recent: SET name: Last side: source
DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02 #conn/32 > 125
RETURN all -- 0.0.0.0/0 0.0.0.0/0 recent: CHECK seconds: 60 name: First side: source
CloseY all -- 0.0.0.0/0 0.0.0.0/0 recent: CHECK name: First side: source
RETURN all -- 0.0.0.0/0 0.0.0.0/0 recent: CHECK name: First side: source
all -- 0.0.0.0/0 0.0.0.0/0 recent: SET name: First side: source
Chain TcpLimit (0 references)
target prot opt source destination
RETURN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x04/0x04
RETURN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x01/0x01
Chain UnderX (0 references)
target prot opt source destination
RETURN all -- 0.0.0.0/0 0.0.0.0/0 recent: CHECK seconds: 60 name: Last side: source
all -- 0.0.0.0/0 0.0.0.0/0 recent: REMOVE name: Last side: source
all -- 0.0.0.0/0 0.0.0.0/0 recent: REMOVE name: First side: source
>>
>> I can't get the iplimit module to work for me,
>> this is an SMP AMD machine.
>>
>> # iptables -A TcpLimit -m iplimit --iplimit-above 125 -j OverX
RD> Do you have OverX and TcpLimit as chains?
RD> Ramin
>>
>> iptables: Invalid argument
>>
>> strace -f ...
>>
prev parent reply other threads:[~2003-08-11 21:47 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-08-11 17:26 iplimit module refuses to work cmbb
2003-08-11 18:03 ` Cedric Blancher
[not found] ` <183352264796.20030811140816@dslr.net>
2003-08-11 18:12 ` Re[3]: " cmbb
2003-08-11 18:32 ` Cedric Blancher
2003-08-11 18:31 ` Ramin Dousti
2003-08-11 21:47 ` justin [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=162365409015.20030811174720@dslr.net \
--to=justin@dslr.net \
--cc=netfilter@lists.netfilter.org \
--cc=ramin@cannon.eng.us.uu.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox