Re: iptables connlimit - ReadList.com

2 msg	mysql in stable and remote vulnerabities
3 msg	CAN-2005-0448 and #286905, dsa?
23 msg	Bits from the Testing Security team
2 msg	AW: [SECURITY] [DSA 662-2] New squirrelmail pac...
3 msg	hi
1 msg	Re: document_all
9 msg	Analysis vulnerabilities associated to publishe...
1 msg	Re: TCP SYN packets which have the FIN flag set.
1 msg	A security fix introduced a 'grave' bug

iptables connlimit
\ Adrian Minta (6 Mar 2005)
. \ Guillaume Tournat (7 Mar 2005)
. . \ Adrian Minta (7 Mar 2005)
. . . \ Bernd Eckenfels (8 Mar 2005)
. . . . \ Adrian Minta (8 Mar 2005)
. \ Bjørn Mork (9 Mar 2005)

1 msg	http://snats.flappie.nl
1 msg	Act now before prices go up
28 msg	Packet sniffing & regular users
1 msg	No place like home
2 msg	sshd directive ignored
2 msg	(No Subject)
1 msg	happy weekend
1 msg	$B$U$D$&$8$cK~B-$G$-$J$$$N$)'v(B
1 msg	Refill Shipping confirmation
1 msg	libasound vulnerability

Subject:	Re: iptables connlimit
Group:	Debian-security
From:	Bjørn Mork
Date:	9 Mar 2005

Adrian Minta <gygy> writes:

> and a module ipt_limit.ko exist in the kernel directory ( 2.6.8-2-k7)

ipt_limit != ipt_connlimit

You are probably lacking kernel support for ipt_connlimit. It's not
part of the Linux kernel yet, and I guess the connlimit patch isn't in
Debian kernels either.

You can get the patch from http://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/

Bjørn
--
No nukes!