Sorry, I didn't explain it well. I wrote: > iptables -A SSH -m recent --update --seconds 30 --hitcount 30 --name sshlist > -j DROP
I should have written this instead: iptables -A SSH -m recent --update --seconds 30 --hitcount 15 --name sshlist -j DROP When using that, I see that it works (only 14 incoming ssh connections in a row are accepted). When I later change --hitcount to 30, it behaves as if I had written "20". That's (one of) the problem(s). -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org