On May 10 2007 16:02, Patrick McHardy wrote:
>>
>> A lot ... as far as the filter table and sshcheck is concerned,
>>
>> iptables -N sshcheck;
>> iptables -A sshcheck -m recent --name sshcheck --seconds 60 --update -j DROP;
>> iptables -A sshcheck -m hashlimit --hashlimit-name sshcheck \
>> --hashlimit-mode srcip --hashlimit 4/min --hashlimit-burst 4 \
>> -j RETURN;
>> iptables -A sshcheck -m recent --name sshcheck --set -j DROP;
>
>Did you get an "invalid size" message in the ringbuffer before the oops?
Now that you mention it, yes:
ip_tables: conntrack match: invalid size 80 != 72
Jan
--
-
To unsubscribe from this list: send the line "unsubscribe sparclinux" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html