Dear list, Here is a rule set to prevent distributed ( from different machine) port scan. But whenevr I insert these rules in my existing iptables rule it reports "bad argument state" Any clue ? `````````````````` IFACE=eth0 iptables -A INPUT -p tcp -i $IFACE -m state --state NEW -m recent --set iptables -A INPUT -p tcp -i $IFACE -m state --state NEW -m recent --update --seconds 30 --hitcount 10 -j DROP iptables -A FORWARD -p tcp -i $IFACE -m state --state NEW -m recent --set iptables -A FORWARD -p tcp -i $IFACE -m state --state NEW -m recent --update --seconds 30 --hitcoun 10 -j DROP ````````````````````````````` thanks -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
