ipt_limit overflow with HZ=1000

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I patched 2.4.21 with "Variable HZ" patch from
http://members.optusnet.com.au/ckolivas/kernel/
and set up config to HZ=1000

When launched previous working iptables setup strange behaviour
appeared...

ie. following rule:
iptables -t nat -A info -s $i -p tcp --dport 80 -m limit --limit-burst 2 --limit 1/day -j CONNMARK --set-mark 80

give me: "invalid argument"

when changed --limit-burst to 1 it worked
iptables -t nat -A info -s $i -p tcp --dport 80 -m limit --limit-burst 1 --limit 1/day -j CONNMARK --set-mark 80

I also tried change --limit-burst and --limit values to have
ocasionaly succes or fail.

Messages from syslog when tried --limit-burst params:
[2,4,5,7,8 didnt work, 3,6 worked !]

Sep  4 13:48:03 kojot kernel: Call rusty: overflow in ipt_limit: 864000000/2
Sep  4 13:51:59 kojot kernel: Call rusty: overflow in ipt_limit: 864000000/4
Sep  4 13:52:05 kojot kernel: Call rusty: overflow in ipt_limit: 864000000/5
Sep  4 13:52:32 kojot kernel: Call rusty: overflow in ipt_limit: 864000000/2
Sep  4 13:52:55 kojot kernel: Call rusty: overflow in ipt_limit: 864000000/7
Sep  4 13:53:17 kojot kernel: Call rusty: overflow in ipt_limit: 216000000/8


Regards
tw
--



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux