Iptables adds several connection rules that make up the number of connections per minute unavailable, total number of errors iptables: Unknownerror4294967295 rules following iptables-AINPUT-ieth0-ptcp -- dport80-mrecent -- namebad_80_access -- update -- seconds60 -- hi
IptablesThe number of connections rule is added. The rule for setting the maximum number of connections per minute is unavailable. an error is returned for the total number of connections.
Iptables: Unknown error 4294967295
The rules are as follows:
Iptables-a input-I eth0-p tcp -- dport 80-m recent -- name bad_80_access -- update -- seconds 60 -- hitcount 150-j REJECT
Then I found a solution from a foreigner.
This is not a bug. You shoshould increase maximum possible value
For? Hitcount parameter (20 by default) by setting ipt_recent
Module option ip_pkt_list_tot.
For example:
# Cat/etc/modprobe. d/EPT. conf
Options ipt_recent ip_pkt_list_tot = 200
Then reload module ipt_recent.
This command should be used to reload the recent module.
Modprobe-r ipt_recent
Disable iptables before re-loading. after adding this configuration, no error is reported.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
A Free Trial That Lets You Build Big!
Start building with 50+ products and up to 12 months usage for Elastic Compute Service