Sorry, I didn't explain it well. I wrote:
> iptables -A SSH -m recent --update --seconds 30 --hitcount 30 --name sshlist 
> -j DROP

I should have written this instead:

iptables -A SSH -m recent --update --seconds 30 --hitcount 15 --name sshlist -j 
DROP

When using that, I see that it works (only 14 incoming ssh connections in a row 
are accepted).

When I later change --hitcount to 30, it behaves as if I had written "20".
That's (one of) the problem(s).


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to