... is created with a hit count greater than ip_pkt_list_tot, the rule ... rsource -j DROP With the patch the second rule-set will ... skennedy@vcn.com> --- net/ipv4/netfilter/ipt_recent.c | 2 ++ 1 file ... diff --git a/net/ipv4/netfilter/ipt_recent.c b/net/ipv4 ...

linux-kernel - Daniel Hokka Zakrisson - Mar 15 2008 - 09:49

... : > If a rule using ipt_recent is created with a hit count greater than > ip_pkt_list_tot, the rule will never match as ... keep track > of enough timestamps. This patch makes ipt_recent refuse to create such > rules. Applied, ...

linux-kernel - Patrick McHardy - Mar 17 2008 - 09:55