LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices

Reply
 
Search this Thread
Old 07-12-2008, 09:52 PM   #1
thanhlong
LQ Newbie
 
Registered: Jul 2008
Posts: 3

Rep: Reputation: 0
Centos 5.0 x86_64: need help adding connlimit module to iptables


hi all,
my company is using Centos 5.0(final), kernel 2.6.18-8.e15 x86_64 for web server. Recently, the server is always under DDOS state and I need some updates on current iptables rules to limit number of connections per IP. However, it seem that my linux box dont support connlimit in iptables currently (I alway get error when run iptables command with connlimit parameter. I need to patch & compile kernel to add connlimit module to iptables.

I have never done this job before, therefore I'm not really confident to do on production server without a guide. I have spent much time in google for an appropriate guide but not luck.

Please help me..

Last edited by thanhlong; 07-13-2008 at 05:29 AM.
 
Old 07-13-2008, 03:22 PM   #2
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,684

Rep: Reputation: 54
Quote:
I need to patch & compile kernel to add connlimit module to iptables.
Do you know this?

To get support for the connlimit target should be as simple as:
modprobe xt_connlimit

That is if Centos has these modules available. I think they do but don't know.
Try it.
 
Old 07-13-2008, 09:09 PM   #3
thanhlong
LQ Newbie
 
Registered: Jul 2008
Posts: 3

Original Poster
Rep: Reputation: 0
Thanks Jomen, but it seem Centos has no these modules:
Quote:
[root@server02 ~]# modprobe xt_connlimit
FATAL: Module xt_connlimit not found.


Quote:
I need to patch & compile kernel to add connlimit module to iptables.
Because I think this is exactly what I have to do (But I need more detail).

http://www.linuxquestions.org/questi...967295-513720/

Last edited by thanhlong; 07-13-2008 at 09:15 PM.
 
Old 07-14-2008, 02:48 AM   #4
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,684

Rep: Reputation: 54
but you don't need to patch - just your regular kerrnel-sources will do.
If there really are no prebuilt packages to get these modules just installed as averything else and you need to build them, you need the kernel-devel packages or the full source.
Same version as you have now - then you configure the kernel using your current configuration (/proc/config.gz) - so you don't run the risk of forgetting anything - and you then include the netfilter-modules you want.
Should be no big deal.
 
Old 07-14-2008, 03:14 AM   #5
thanhlong
LQ Newbie
 
Registered: Jul 2008
Posts: 3

Original Poster
Rep: Reputation: 0
That may be an equivocal answer for a newbie like me
I need an overview step by step to do. Anyway, thanks so much. I will try with my best!
 
  


Reply

Tags
centos5


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Xen 3.2 on CentOS 5.2 x86_64 / RHEL 5.2 x86_64 LXer Syndicated Linux News 0 07-12-2008 05:51 PM
Trouble adding connlimit support Mithrilhall Linux - Kernel 0 02-01-2008 08:44 AM
k3b doesn't run on Centos 5 x86_64 dralexpe Linux - Software 7 08-05-2007 11:37 AM
LXer: Release for CentOS-5 i386 and x86_64 LXer Syndicated Linux News 0 04-13-2007 01:46 AM
CentOS 4 (x86_64 or i386) Mithrilhall Linux - Newbie 2 07-14-2006 10:36 AM


All times are GMT -5. The time now is 06:39 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration