Re: Idle Time (ssh, or telnet)

["Nathan" <smurf@sginet.com>]

ipchains -M -S 10000 10000 10000

I prefer:

ipchains -M -S 10000 5000 9000

Those MASQ tables can get pretty damn big with the timeouts that large ;)

-Nathan

----- Original Message -----
From: "Nick Jennings" <nick@namodn.com>
To: "Security" <security@ultra.decorah.net>
Cc: <debian-isp@lists.debian.org>
Sent: Wednesday, February 16, 2000 7:12 PM
Subject: Re: Idle Time (ssh, or telnet)


> On Mon, Feb 14, 2000 at 08:34:52PM -0600, Security wrote:
> >
> > I believe that the /sbin/ipfwadm -M -s 100000 100000 100000 is the
> > pertinent line.
> >
> > Note: this machine is a 2.0.37 kernel on Debian 2.1. I am not sure of
the
> > equivalent ipchains incantation.  Maybe someone else on the list can
toss
> > it out here.
>
> It would be great if someone could post the ipchains equiv. to this
> ipfwadm rule.
>
>
> --
>     -  Nick Jennings
> Email: nick@namodn.com
> Web  : http://nick.namodn.com
>     -
>
>
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
>