Taylor, Grant wrote: > recent v1.3.1-20050422 options: > [!] --set Add source address to list, always matches. > [!] --rcheck Match if source address in list. > [!] --update Match if source address in list, also > update last-seen time. > [!] --remove Match if source address in list, also > removes that address from list. > --seconds seconds For check and update commands above. > Specifies that the match will only occur > if source address last seen within > the last 'seconds' seconds. > --hitcount hits For check and update commands above. > Specifies that the match will only occur > if source address seen hits times. > May be used in conjunction with the > seconds option. > --rttl For check and update commands above. > Specifies that the match will only occur > if the source address and the TTL > match between this packet and the one > which was set. > Useful if you have problems with people > spoofing their source address in order > to DoS you via this module. > --name name Name of the recent list to be used. > DEFAULT used if none given. > --rsource Match/Save the source address of each > packet in the recent list table (default). > --rdest Match/Save the destination address of > each packet in the recent list table. > ipt_recent v0.3.1: Stephen Frost <sfrost@xxxxxxxxxxx>. > http://snowman.net/projects/ipt_recent/ Freaky. My output is the same as yours with the exception of the 1.2.11 string. recent v1.2.11 options: <snip same stuff that you have> ipt_recent v0.3.1: Stephen Frost <sfrost@xxxxxxxxxxx>. http://snowman.net/projects/ipt_recent/ I'm a little confused about the difference between "recent v1.2.11" and "ipt_recent v0.3.1" Is one a kernel component and the other the userspace part? I'm also a little confused about p-o-m. Is this something I can apply without recompiling my (modular) kernel? Are there any good docs on how to use p-o-m? I didn't see any immediately obvious on the netfilter site and the p-o-m section seems to end mid- ;) Thanks, pete
