* Leonardo Rodrigues ( listas ) (leolistas@solucoesip.net) wrote: > > > It's really not clear for me :) Could you give an example rule of how an > destination address could be checked with recent module in an OUTPUT rule > for example ? This is my situation ..... i want ALL packets whose > destination was matched for the last 60 seconds in a recent list called > 'bullshit'. > > iptables -A OUTPUT -m recent --seconds 60 --name bullshit ??????????????? -j > DROP --rdest for the rule above, that's it. Note that something else needs to actually populate that table, but I think you've got that figured out already... Stephen
