On Friday 2011-12-09 03:31, Tim Gardner wrote: >> >>> If not, we should probably consider using .min=1 on the --seconds >>> parameter, in which case the test is also redundant. >>> >> >> Done. Tested with the following combinations and received the expected >> failures on the first 2: >> >> iptables -A FORWARD -m recent --rcheck --seconds 0 -j DROP >> iptables -A FORWARD -m recent --rcheck --reap -j DROP >> iptables -A FORWARD -m recent --rcheck --seconds 10 --reap -j DROP >> >> rtg > > Jan ? Is this v3 patch sufficient ? No more showstopper comments were made, therefore, I moved to apply. In git now. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html