Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting

2007-06-03 Thread Andrew Beverley
On Sun, 2007-06-03 at 19:18 +0200, Jan Engelhardt wrote: > On Jun 3 2007 18:00, Andrew Beverley wrote: > >On Sun, 2007-06-03 at 13:12 +0200, Jan Engelhardt wrote: > >> Adds the connlimit match that has been in POM-NG for a long time. > >> > >> * works with 2.6.22, xtables'ified and all th

Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting

2007-06-03 Thread Jan Engelhardt
On Jun 3 2007 18:00, Andrew Beverley wrote: >On Sun, 2007-06-03 at 13:12 +0200, Jan Engelhardt wrote: >> Adds the connlimit match that has been in POM-NG for a long time. >> >> *works with 2.6.22, xtables'ified and all that >> >> *will request nf_conntrack_ipv4 upon load

Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting

2007-06-03 Thread Andrew Beverley
On Sun, 2007-06-03 at 13:12 +0200, Jan Engelhardt wrote: > Adds the connlimit match that has been in POM-NG for a long time. > > * works with 2.6.22, xtables'ified and all that > > * will request nf_conntrack_ipv4 upon load > (otherwise it hotdrops every packet - a glitch that goes

Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting

2007-06-03 Thread Jan Engelhardt
Hello, >From: Jan Engelhardt <[EMAIL PROTECTED]> >Date: Sun, 3 Jun 2007 13:12:55 +0200 (MEST) > >> +static int __init xt_connlimit_init(void) >> +{ >> +need_conntrack_ipv4(); >> +return xt_register_match(&xt_connlimit_reg); >> +} > >You can use nf_ct_l3proto_try_module_get() instead of int

Re: [PATCH 1/2] xt_connlimit (kernel) - connection limiting

2007-06-03 Thread Yasuyuki KOZAKAI
Hi, From: Jan Engelhardt <[EMAIL PROTECTED]> Date: Sun, 3 Jun 2007 13:12:55 +0200 (MEST) > +static int __init xt_connlimit_init(void) > +{ > + need_conntrack_ipv4(); > + return xt_register_match(&xt_connlimit_reg); > +} You can use nf_ct_l3proto_try_module_get() instead of introducing n