On Thursday 2010-07-29 11:08, Portedaix wrote: > > QUESTION - SHORT VERSION : > Is there a way to have a rule equivalent to the one below which is for kernel > 2.6.14 and above, with a linux kernel 2.6.9 ? > '#iptables -A INPUT -p udp -m udp --dport 5060 -m string --string "Cirpack > KeepAlive Packet" --algo bm --to 65535 --source sip.ovh.net -j DROP' > > I could avoid that by activating the rule > > #iptables -A INPUT -p udp -m udp --dport 5060 -m string --string "Cirpack > KeepAlive Packet" --algo bm --to 65535 --source sip.ovh.net -j DROP > > But my main problem is this string module. My kernel is 2.6.9, and string > module is used starting from 2.6.14 kernel. Upgrading the kernel on my > production server is not easy, and may lead to a heavy reconfiguration. Neither of those kernels is supported anymore. (My credo is: shouldn't have waited until it's completely turned to rust.) -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
