ipt_string problems and FAQ

[Tabris <tabris@tabris.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, i admit to finding a message in the archive that mentioned that we're 
not supposed to use ipt_string for stopping code red and such (it says 
there's an FAQ entry for it, which i did not find), so first, I'd like to 
ask where this FAQ entry is...

second, I've been using ipkungfu to attempt to stop codered, nimda, etc 
from hitting my apache server and clogging up my logs.

It's not working, the rules never trigger. I've played around with it to 
no avail.

I guess, if this doesn't work, and isn't supposed to work, what SHOULD I 
do?

I'm using a kernel 2.4.22-pre series kernel with some patch-o-matic 
iptables patches. I hope this doesn't end up being another of those 
stupid questions that never gets answered.

TIA
- --
tabris
- -
Nietzsche says that we will live the same life, over and over again.
God -- I'll have to sit through the Ice Capades again.
		-- Woody Allen, "Hannah and Her Sisters"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/TOggtTgrITXtL+8RAiGkAJ49cU4UE+LzbcbS4XNxp+RM+uo3qgCfZQxD
iL/1//ju0Ke+UuJIXkZauZk=
=mY90
-----END PGP SIGNATURE-----