Hey Dairenn,

I may be wrong here.  But I believe if you use yum to do an update you could
quite possibly upgrade the entire system to CentOS 4.4

I'm not sure what that may affect for you but it is a possibility none the
less.


-----Original Message-----
From: Dairenn Lombard [mailto:[EMAIL PROTECTED] 
Sent: Friday, 1 December 2006 9:26 a.m.
To: [email protected]
Subject: RE: [qmailtoaster] SMTP Connection Throttling by IP address

> -----Original Message-----
> From: Philip Nix Guru [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, November 30, 2006 12:17 PM
> To: [email protected]
> Subject: Re: [qmailtoaster] SMTP Connection Throttling by IP address
> 
> Here we go
> 
> iptables -I INPUT -p tcp --dport 25 -i eth0 -m state --state 
> NEW -m recent --set
>  
> 
> iptables -I INPUT -p tcp --dport 25 -i eth0 -m state --state 
> NEW -m recent --update --seconds 60 --hitcount 10 -j DROP
>  
> Same ip is allowed to connect to port 25 10x/60seconds
> then it is blocked

It worked on my CentOS 4.4 box, but it didn't on my CentOS 3.6 box:

Applying iptables firewall rules: tiptables-restore v1.2.8: Couldn't
load match `recent':/lib/iptables/libipt_recent.so: cannot open shared
object file: No such file or directory

How do I install libipt_recent.so?  By upgrading iptables?  Is it
possible to do that without upgrading the kernel?  It's running the
2.4.21-37.EL linux kernel which could be because it is a CentOS 3.6
system and a newer kernel RPM is not available for CentOS 3.x.


---------------------------------------------------------------------
     QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
     QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to