Re: ipchains doesn't seem to honor -M -S

Juanjo Ciarlante (irriga@impsat1.com.ar)
Fri, 2 Oct 1998 21:36:39 -0300

On Fri, Oct 02, 1998 at 11:53:21PM +0000, Marc MERLIN wrote:
> With a 2.1.123 kernel, I did the following:
>
> bernina:/etc/rc.d# ipchains -M -S 86400 60 120
> bernina:/etc/rc.d# ipchains -M -L | grep TCP | grep magic
> TCP 00:55.50 10.1.1.2 magic.magic.metawire.com 2543 (64623) -> uucp
> TCP 06:12.12 10.1.1.2 magic.magic.metawire.com 2542 (64496) -> 22
>
> I killed the ssh session here, and launched a new one
>
> bernina:/etc/rc.d# ipchains -M -L | grep TCP | grep magic
> TCP 00:34.58 10.1.1.2 magic.magic.metawire.com 2543 (64623) -> uucp
> TCP 14:59.99 10.1.1.2 magic.magic.metawire.com 2548 (64653) -> 22
> TCP 00:06.19 10.1.1.2 magic.magic.metawire.com 2542 (64496) -> 22
>
> As you can see, neither the 60 seconds after the session close, nor the 24h
> for each open TCP session are honored. This is obviously very annoying as it
> means that all my ssh sessions to the outside die after 15mn of inactivity.
>
Yeap. Patch already sent to Linus.
You can also download it from my URL.

Regards

-- 
-- Juanjo       http://juanjox.home.ml.org/






-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/