> -----Original Message----- > From: netfilter-owner@xxxxxxxxxxxxxxx [mailto:netfilter- > owner@xxxxxxxxxxxxxxx] On Behalf Of Dzianis Kahanovich > Sent: Thursday, February 07, 2008 3:21 PM > To: netfilter@xxxxxxxxxxxxxxx > Subject: Re: Patch-o-matic+iptables+kernel, which versions fits together? > > lokiji lokiji wrote: > > > i would like to use connlimit module, but i don't know which version of > patch-o-matic should i use on which version of kernel and iptables. Could > someone help me? > > Thanks a lot > > - > > To unsubscribe from this list: send the line "unsubscribe netfilter" in > > the body of a message to majordomo@xxxxxxxxxxxxxxx > > More majordomo info at http://vger.kernel.org/majordomo-info.html > > > > > > Latest kernel & iptables. Connlimit now inside of kernel. > > PS But I lazy think about patch of connlimit to bound timeout. While users > using keep-alive connections - there are too abstract classification (I > use > slowdown "abusers"). IMHO it is easy (in entry listing add one "if" with > existing "timeout" field, but I use proxy too and first timout need for > proxy, > then I do not do nothing while - I do not know how to do it in squid). > > -- > WBR, > Denis Kaganovich, mahatma@xxxxx http://mahatma.bspu.unibel.by > - > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html So are you saying I don't have to recompile either of them or just recompile iptables after patching it? - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
