The parameter became obsolete in kernel commit abc86d0f9924 ("netfilter: xt_recent: relax ip_pkt_list_tot restrictions"). Reported-by: Fabio <pedretti.fabio@xxxxxxxxx> Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1745 Cc: Florian Westphal <fw@xxxxxxxxx> Signed-off-by: Phil Sutter <phil@xxxxxx> --- extensions/libxt_recent.man | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/extensions/libxt_recent.man b/extensions/libxt_recent.man index 82537fab9846f..e0305f9857e29 100644 --- a/extensions/libxt_recent.man +++ b/extensions/libxt_recent.man @@ -55,9 +55,7 @@ This option must be used in conjunction with one of \fB\-\-rcheck\fP or address is in the list and packets had been received greater than or equal to the given value. This option may be used along with \fB\-\-seconds\fP to create an even narrower match requiring a certain number of hits within a specific -time frame. The maximum value for the hitcount parameter is given by the -"ip_pkt_list_tot" parameter of the xt_recent kernel module. Exceeding this -value on the command line will cause the rule to be rejected. +time frame. .TP \fB\-\-rttl\fP This option may only be used in conjunction with one of \fB\-\-rcheck\fP or @@ -93,8 +91,10 @@ to flush the DEFAULT list (remove all entries). \fBip_list_tot\fP=\fI100\fP Number of addresses remembered per table. .TP -\fBip_pkt_list_tot\fP=\fI20\fP -Number of packets per address remembered. +\fBip_pkt_list_tot\fP=\fI0\fP +Number of packets per address remembered. This parameter is obsolete since +kernel version 3.19 which started to calculate the table size based on given +\fB\-\-hitcount\fP parameter. .TP \fBip_list_hash_size\fP=\fI0\fP Hash table size. 0 means to calculate it based on ip_list_tot by rounding it up -- 2.43.0