Thread (5 messages) flat view 5 messages, 2 authors, 2012-05-02

Re: [PATCH 1/1] netfilter: xt_recent: Add optional mask option for xt_recent

From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2012-04-11 23:14:37
Also in: lkml, netfilter-devel

Hi Denys,

On Tue, Mar 06, 2012 at 01:24:44PM +0200, Denys Fedoryshchenko wrote:
Use case for this feature:
1)In some occasions if you need to allow,block,match specific subnet.
2)I can use recent as a trigger when netfilter rule matches, with mask 0.0.0.0

Example:

If you ping 8.8.8.8, after that you can't ping 2.2.2.10
Could you provide an useful example for this new feature?

I also think you can make this with hashlimit, that allows you to
set the network mask.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help