how to change values of parameters for iptables "recent" match ?

anctop · 12-08-2010, 06:25 PM

According to the man page, the "recent" match of iptables accepts certain parameters (e.g. "ip_list_tot"). I'd like to change the values of some of them.
All the solutions found on the web were about changing parameters for module, but my kernel was compiled without modules support (such that it can be used for installation booting as well).
How can I change the match parameters for my non-modular kernel ?

andrewthomas · 12-25-2010, 11:44 PM

It would help if you would specify what exactly you are trying to accomplish.

Here is a limit match line from my iptables.rules

Code:

-A INPUT -m limit --limit 5/min --limit-burst 10 -j LOG

If you have support build into the kernel, you don't have to worry about loading modules. You should be good to go.

anctop · 12-27-2010, 10:42 PM

My rules are working well.
I just want to change the way of logging in /proc/net/xt_recent/* by changing some of the parameters (e.g. "ip_list_tot" and "ip_pkt_list_tot"), but it seems that they can be changed only for kernels with modules support.