Jan Engelhardt wrote: > On May 10 2007 16:05, Jan Engelhardt wrote: > >>On May 10 2007 16:02, Patrick McHardy wrote: >> >>>>A lot ... as far as the filter table and sshcheck is concerned, >>>> >>>>iptables -N sshcheck; >>>>iptables -A sshcheck -m recent --name sshcheck --seconds 60 --update -j DROP; >>>>iptables -A sshcheck -m hashlimit --hashlimit-name sshcheck \ >>>> --hashlimit-mode srcip --hashlimit 4/min --hashlimit-burst 4 \ >>>> -j RETURN; >>>>iptables -A sshcheck -m recent --name sshcheck --set -j DROP; >>> >>>Did you get an "invalid size" message in the ringbuffer before the oops? >> >>Now that you mention it, yes: >> >>ip_tables: conntrack match: invalid size 80 != 72 > > > This is fixed in 2.6.21, thanks. Yes, the hashlimit compat issue is. But the underlying problem still persists, I'll send you a patch for testing soon. - To unsubscribe from this list: send the line "unsubscribe sparclinux" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
