-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Although the original report says, "After 250 days, the jiffies overflow
and ipt_recent do not work anymore" and is for 2.4, I've actually found
that the code included in 2.6.8 (and probably any kernel version that
includes ipt_recent) causes unexpected issues related to the jiffies as
well, other than the 250 days issue.

If you have rules that block based on ipt_recent you will find that they
will block much too early at odd times. For example, I have a rule that
will DROP ssh connections if there have been more than 6 seen in the
last 60 seconds, but (seemingly) randomly I will get DROPped on the
first connection.

Micah
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDigIG9n4qXRzy1ioRAgDaAJ9g3uzHBKkSewx2CL0YkRs0ksFFoACgqR5D
rRv5+cm8MbV9KH95NsY6Y2I=
=3jfv
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to