Results 1 to 8 of 8
I try to use iptables connect limit function.
I insert module /lib/modules/2.6.18-92.el5/kernel/net/netfilter/xt_limit.ko already.
but following command is something wrong.
iptables -t filter -A INPUT -p tcp --syn --dport 80 -m ...
- 02-18-2009 #1Linux Newbie
- Join Date
- Feb 2009
- Posts
- 99
some problem about iptables (RHEL5)
I try to use iptables connect limit function.
I insert module /lib/modules/2.6.18-92.el5/kernel/net/netfilter/xt_limit.ko already.
but following command is something wrong.
iptables -t filter -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 2 -j REJECT
iptables: Unknown error 4294967295
can anyone help?
thank you.
- 02-18-2009 #2
Remove '-t filter' from the rule.
- 02-19-2009 #3Linux Newbie
- Join Date
- Feb 2009
- Posts
- 99
- 02-19-2009 #4
Sorry didn't look at the whole rule.
Code:iptables -A INPUT -m tcp -p tcp --syn --dport 80 -m connlimit --connlimit-above 2 -j REJECT
- 02-20-2009 #5Linux Newbie
- Join Date
- Feb 2009
- Posts
- 99
thank you for reply. but.
iptables -A INPUT -m tcp -p tcp --syn --dport 80 -m connlimit --connlimit-above 2 -j REJECT
iptables: Unknown error 4294967295
- 02-22-2009 #6
OK, it sounds like you do not have commlimit properly setup. You are going to have to fix this in order to get thing working. No, I do not have this subroutine installed unless it is installed be the default setup or installed with the updates. I try to keep my system as simple to operate as possible.
- 02-23-2009 #7Just Joined!
- Join Date
- Jun 2004
- Location
- Portugal
- Posts
- 47
Two -m options in the same line... I think your looking for this:
Code:iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 2 -j REJECT
- 02-24-2009 #8Linux Newbie
- Join Date
- Feb 2009
- Posts
- 99
thank you for you reply, but unfortunately
iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 2 -j REJECT
iptables: Unknown error 4294967295
[root@station10 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
some error still show up.


Reply With Quote
