From: Phil Sutter Date: Wed, 12 Jun 2024 14:17:28 +0000 (+0200) Subject: man: recent: Adjust to changes around ip_pkt_list_tot parameter X-Git-Tag: v1.8.11~57 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5f904c829791d94c59936e24e419b4137bc7ed92;p=thirdparty%2Fiptables.git man: recent: Adjust to changes around ip_pkt_list_tot parameter The parameter became obsolete in kernel commit abc86d0f9924 ("netfilter: xt_recent: relax ip_pkt_list_tot restrictions"). Reported-by: Fabio Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1745 Cc: Florian Westphal Signed-off-by: Phil Sutter --- diff --git a/extensions/libxt_recent.man b/extensions/libxt_recent.man index 82537fab..e0305f98 100644 --- a/extensions/libxt_recent.man +++ b/extensions/libxt_recent.man @@ -55,9 +55,7 @@ This option must be used in conjunction with one of \fB\-\-rcheck\fP or address is in the list and packets had been received greater than or equal to the given value. This option may be used along with \fB\-\-seconds\fP to create an even narrower match requiring a certain number of hits within a specific -time frame. The maximum value for the hitcount parameter is given by the -"ip_pkt_list_tot" parameter of the xt_recent kernel module. Exceeding this -value on the command line will cause the rule to be rejected. +time frame. .TP \fB\-\-rttl\fP This option may only be used in conjunction with one of \fB\-\-rcheck\fP or @@ -93,8 +91,10 @@ The module itself accepts parameters, defaults shown: \fBip_list_tot\fP=\fI100\fP Number of addresses remembered per table. .TP -\fBip_pkt_list_tot\fP=\fI20\fP -Number of packets per address remembered. +\fBip_pkt_list_tot\fP=\fI0\fP +Number of packets per address remembered. This parameter is obsolete since +kernel version 3.19 which started to calculate the table size based on given +\fB\-\-hitcount\fP parameter. .TP \fBip_list_hash_size\fP=\fI0\fP Hash table size. 0 means to calculate it based on ip_list_tot by rounding it up