Re: IPTables - Going Stateless

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Nick Khamis a écrit :
> 
> # Set Log Limit
> LOGLIMIT="2/s"
> LOGLIMITBURST="10"
> 
> $IPTABLES -A LOGINPUT -i $INTIF1 -p icmp -j LOG --log-prefix "ICMP
> LOGINPUTDROP: " --log-tcp-options --log-ip-options -m limit --limit
> $LOGLIMIT
> 
> I am getting the following error: iptables: No chain/target/match by that name
> And it's due to the "limit" flag.
> 
> lsmod
> Module                  Size  Used by
> xt_LOG                  6531  7
> ipt_REJECT              1917  6
> iptable_filter           988  1
> ip_tables               8370  1 iptable_filter
> e100                   28046  0

Looks like the "limit" match is not enabled in your kernel. Check
CONFIG_NETFILTER_XT_MATCH_LIMIT in your kernel config file.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux