- 论坛徽章:
- 0
|
rhel5版本:2.6.23.8
iptables :1.3.8
使用iptables -m connlimit -help这个个正常,
但使用 iptables -I FORWARD -p tcp --syn --dport 80 -m connlimit --connlimit-above 5 -j DROP时出错
提示iptables: Invalid argument
find /lib |grep connlimit查看
find /lib |grep connlimit
/lib/iptables/libipt_connlimit.so
/lib/modules/2.6.23.8/kernel/net/netfilter/xt_connlimit.ko
Connections/IP limit match support 已加载为模块,并编译成功,modprobe ipt_connlimit是成功的,但用lsmod查看,却没有加载这个模块,怎么才能正确加载这个模块,来保证iptables -I FORWARD -p tcp --syn --dport 80 -m connlimit --connlimit-above 5 -j DROP时出错
提示iptables: Invalid argument
不再出错
lsmod |grep ip显示如下(没有ipt_connlimit, 怎么回事?modprobe ipt_connlimit没有出错呀):
iptable_nat 11140 1
nf_nat 22828 1 iptable_nat
ipt_REJECT 8704 5
ipt_ipp2p 11008 2
nf_conntrack_ipv4 21640 15 iptable_nat
nf_conntrack 66248 8 xt_connlimit,nf_conntrack_netbios_ns,iptable_nat,nf_nat,xt_conntrack,xt_layer7,nf_conntrack_ipv4,xt_state
nfnetlink 10008 3 nf_nat,nf_conntrack_ipv4,nf_conntrack
iptable_filter 7168 1
ip_tables 17476 2 iptable_nat,iptable_filter
ip6table_filter 6912 0
ip6_tables 18500 1 ip6table_filter
x_tables 18564 12 xt_connlimit,iptable_nat,xt_conntrack,xt_layer7,ipt_REJECT,xt_string,xt_mac,ipt_ipp2p,xt_tcpudp,xt_state,ip_tables,ip6_tables
ipv6 261188 26
tulip 53408 0
|
|