iptables关于connlimit的问题

pdaliu

debian:/# iptables -A INPUT -p tcp -m connlimit --connlimit-above 20 -j DROP
iptables: Invalid argument

我这样写看上去没有问题为什么会说参数无效呢?

lin_lin13

Post by pdaliu;1889923
debian:/# iptables -A INPUT -p tcp -m connlimit --connlimit-above 20 -j DROP
iptables: Invalid argument

我这样写看上去没有问题为什么会说参数无效呢?

use the command:

iptables -m connlimit  --help

if display like this:
iptables v1.4.0: Couldn't load match `connlimit':/lib/iptables/libipt_connlimit1.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

so you will to patch the kernel and iptables ,and recompile it.

huzi1986

要重新打内核补丁