[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: hallo pleae help me. :)



Hello,

Alexandr Shurigin a écrit :

debian:/lib# iptables -A INPUT -p tcp --syn --dport 3128 -m connlimit !
--connlimit-above 5 -j ACCEPT
iptables: No chain/target/match by that name

debian:/lib# modprobe ipt_connlimit
FATAL: Module ipt_connlimit not found.
[...]
how to install connlimit module ?

debian:/lib# uname -a
Linux debian 2.6.18-5-686 #1 SMP Sat Dec 1 22:58:58 UTC 2007 i686 GNU/Linux

The 'connlimit' match support is not included in the mainline kernel before version 2.6.23. For earlier kernel versions, you must patch the sources with the patch-o-matic-ng [1]. Note that the 'connlimit' patch is not included any more in the latest patch-o-matic-ng snapshots and must be downloaded separately [2]. The patch-o-matic-ng may also require the iptables sources [3].

[1] <http://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/>
[2] Run "./runme --download" in the patch-o-matic-ng directory before applying the patch by running "./runme connlimit". Then enable the connlimit match in the kernel config options and rebuild the kernel.
[3] <http://ftp.netfilter.org/pub/iptables/>


Reply to: