Just recompiled the latest iptables (1.4.0) from vanilla source:
root@db05:/usr/src/iptables# iptables -A INPUT -p tcp -m tcp --tcp-flags
FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 20 --connlimit-mask
32 -j DROP
iptables: Invalid argument
root@db05:/usr/src/iptables/root# dmesg
cannot load conntrack support for address family 2
Jan Engelhardt wrote:
(please keep the mailing list in Cc)
On Thursday 2008-04-03 15:47, Bgs wrote:
Sorry for spamming, but forgot this from my previous mail:
ip_tables: connlimit match: invalid size 32 != 16
This is the error I get since 2.6.23 if I try the merged connlimit.
Fix your iptables package, it still runs with the old connlimit.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
