Re: iptables connlimit

2005-03-07 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: >> >server# iptables -A INPUT -p tcp --dport 80 -m connlimit --connlimit-above >> >3 -j REJECT --reject-with tcp-reset Have you tried: iptables -m connlimit -h does it show the connlimit options? BTW: my iptables manpage knows about -m connrate --con

Re: iptables connlimit

2005-03-07 Thread Adrian Minta
On Mon, 07 Mar 2005 09:29:19 +0100 Guillaume Tournat <[EMAIL PROTECTED]> wrote: > Adrian Minta a écrit : > > >Is iptables connlimit available in sarge ? > >I try to limit incoming connection to my webserver: > > > >server# iptables -A INPUT -p tcp --dport 80 -m connlimit --connlimit-above > >3 -j

A security fix introduced a 'grave' bug

2005-03-07 Thread Ludovic Drolez
Hi, Recently, I adopted the mc package with Stefano Melchior, and I'd like to address the following problem: A woody security update broke the most important feature in mc: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=246943 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=249366 What can be

Re: iptables connlimit

2005-03-07 Thread Guillaume Tournat
Adrian Minta a écrit : Is iptables connlimit available in sarge ? I try to limit incoming connection to my webserver: server# iptables -A INPUT -p tcp --dport 80 -m connlimit --connlimit-above 3 -j REJECT --reject-with tcp-reset the error: iptables: No chain/target/match by that name What I'm doing