On May 10 2007 16:05, Jan Engelhardt wrote: >On May 10 2007 16:02, Patrick McHardy wrote: >>> >>> A lot ... as far as the filter table and sshcheck is concerned, >>> >>> iptables -N sshcheck; >>> iptables -A sshcheck -m recent --name sshcheck --seconds 60 --update -j DROP; >>> iptables -A sshcheck -m hashlimit --hashlimit-name sshcheck \ >>> --hashlimit-mode srcip --hashlimit 4/min --hashlimit-burst 4 \ >>> -j RETURN; >>> iptables -A sshcheck -m recent --name sshcheck --set -j DROP; >> >>Did you get an "invalid size" message in the ringbuffer before the oops? > >Now that you mention it, yes: > >ip_tables: conntrack match: invalid size 80 != 72 This is fixed in 2.6.21, thanks. Jan -- - To unsubscribe from this list: send the line "unsubscribe sparclinux" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
