On May 10 2007 16:05, Jan Engelhardt wrote:
>On May 10 2007 16:02, Patrick McHardy wrote:
>>>
>>> A lot ... as far as the filter table and sshcheck is concerned,
>>>
>>> iptables -N sshcheck;
>>> iptables -A sshcheck -m recent --name sshcheck --seconds 60 --update -j
>>> DROP;
>>> iptables -A sshcheck -m hashlimit --hashlimit-name sshcheck \
>>> --hashlimit-mode srcip --hashlimit 4/min --hashlimit-burst 4 \
>>> -j RETURN;
>>> iptables -A sshcheck -m recent --name sshcheck --set -j DROP;
>>
>>Did you get an "invalid size" message in the ringbuffer before the oops?
>
>Now that you mention it, yes:
>
>ip_tables: conntrack match: invalid size 80 != 72
This is fixed in 2.6.21, thanks.
Jan
--
-
To unsubscribe from this list: send the line "unsubscribe sparclinux" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html