From mboxrd@z Thu Jan 1 00:00:00 1970 From: ratheesh k Subject: Re: removing black listed ip Date: Mon, 12 Apr 2010 11:54:54 +0530 Message-ID: References: Mime-Version: 1.0 Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:received:message-id:subject:from:to:cc:content-type; bh=/StzqTUk2Bmi+Mnzmu/vxAxTd6qXZI78rAYBn75isFs=; b=ivTvvgDP/P4xTVB3f/f3ochMnrmzIiHB5anjxw+eU9y3ZfNaxUlIEBPPXg+meOk5QP 66oTJxgwlEg7GSRs9sl4Vc3W9fPShFfoN2FRRmdYZ2UOisbpJ/djmiGX5bUna2nnCmoo NHOj8DZoQMI5Z+O+BPsDQMj/PsgJV5vvQoF/I= In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Jan Engelhardt Cc: netfilter@vger.kernel.org On Sat, Apr 10, 2010 at 11:12 PM, Jan Engelhardt wrote: > On Saturday 2010-04-10 19:20, ratheesh k wrote: > >>> xt_recent works by comparing the difference between an entry's >>> timestamps and the current time with the chosen --seconds parameter. >> >>If an ip is black listed , when it will get removed > > It will not get removed. If you want any action, such as blacklisting, > to stop after a given time, you use --seconds as I just told. > if number of ip balcklisted ip is more than ip_list_tot , old entries will be replaced by new ip addresses ? . { once list if full , what will happen for new black listing } Thanks, Ratheesh