iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --mask 255.255.255.0
results in
iptables v1.4.21: unknown option "--mask"
Try `iptables -h' or 'iptables --help' for more information.
Yet iptables -m recent --help includes:
--mask netmask Netmask that will be applied to this recent list.
Looking at the source, the only oddity I see is that struct xt_recent_mtinfo does not contain mask, while struct xt_recent_mtinfo_v1 does contain mask. Is this telling me that --mask used to be, but is no longer, supported? Or is it a bug where a simple patch can fix it?
FWIW, v1.6.0's libxt_recent.c is unchanged.
Thanks,
Neal
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
