netfilter buglog - May 2003 - [Bug 95] inverse limit match doesn't work

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95





------- Additional Comments From laforge@netfilter.org  2003-05-31 23:25 -------
I can confirm this bug.

neither libipt_limit.c nor ipt_limit.c contain any handling of inversion.

Together with Bug #94, I think it's time to rewrite parts of the limit match
in
order to address those issues.  I doubt this will be possible without any
changes to the structure matchinfo size :(




------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=95





------- Additional Comments From email@cs-ware.de  2003-06-02 15:35 -------
Created an attachment (id=26)
adds inverse limit matching to the iptables-module (libipt_limit.c) and kernel
(works for me)


------- Additional Comments From email@cs-ware.de  2003-06-02 15:44 -------
I wrote a small patch (attachment 26) to add inverse matching to iptables 
(v1.2.8; libipt_limit.c) and kernel (v2.4.20; ipt_limit.h and ipt_limit.c).

I've tested it locally and it works for me.



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.