Re: -m recent

[uniplex <uniplex@xxxxxxxxxxxxxxxxx>]

Stephen Frost wrote:

> > iptables -A INPUT -i eth0 -p all -m recent --name icmps --update -j DROP
> >
> > iptables -N icmps
> > iptables -A INPUT -i eth0 -p icmp -j icmps
> > iptables -A icmps -m recent --name icmps --set -j DROP
> > iptables -A icmps -j DROP
>
> This looks good to me..  Can you tell me what version of ipt_recent
> you're using?  An old version had a bug where the --name only worked
> when it was the last option, that may be the problem.
>
> 	Stephen
Hey Stephen,

How can I tell what version of ipt_recent I have? I downloaded the 
latest version of patch-o-matic and installed your patch from there.

I tried using --name in different places but it still doesn't seem to 
work for whatever reason. Here's what I've tested with now.

iptables -A INPUT -i eth0 -p all -m recent --update -j DROP --name icmps

iptables -N icmps
iptables -A INPUT -p icmp -i eth0 -j icmps
iptables -A icmps -m limit --limit 2/hour --limit-burst 1 -j LOG 
--log-level alert --log-prefix "icmp: "
iptables -A icmps -m recent --set -j DROP --name icmps
iptables -A icmps -j DROP

Thanks.