Re: [PATCH] netfilter: ipt_recent: sanity check hit count
Daniel Hokka Zakrisson wrote: > If a rule using ipt_recent is created with a hit count greater than > ip_pkt_list_tot, the rule will never match as it cannot keep track > of enough timestamps. This patch makes ipt_recent refuse to create such > rules.