Re: IPTables - Going Stateless

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thank you so much Pascal!!! It took me a while to find it, but for
future googlers

"limit" match support = CONFIG_NETFILTER_XT_MATCH_LIMIT

Make sure limit match support is included as a module.

Kind Regards,

Nick


On 5/25/13, Pascal Hambourg <pascal@xxxxxxxxxxxxxxx> wrote:
> Nick Khamis a écrit :
>>
>> # Set Log Limit
>> LOGLIMIT="2/s"
>> LOGLIMITBURST="10"
>>
>> $IPTABLES -A LOGINPUT -i $INTIF1 -p icmp -j LOG --log-prefix "ICMP
>> LOGINPUTDROP: " --log-tcp-options --log-ip-options -m limit --limit
>> $LOGLIMIT
>>
>> I am getting the following error: iptables: No chain/target/match by that
>> name
>> And it's due to the "limit" flag.
>>
>> lsmod
>> Module                  Size  Used by
>> xt_LOG                  6531  7
>> ipt_REJECT              1917  6
>> iptable_filter           988  1
>> ip_tables               8370  1 iptable_filter
>> e100                   28046  0
>
> Looks like the "limit" match is not enabled in your kernel. Check
> CONFIG_NETFILTER_XT_MATCH_LIMIT in your kernel config file.
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux