Re: [syslog-ng] Firewalling with syslog-ng, a working prototype

Op 20-02-11 23:06, Valentijn Sessink schreef:

can be concatenated so that you don't need a separate "block" chain anymore, as follows: ip6tables -A INPUT -m recent --rcheck --name syslogblock --seconds 900 --hitcount 15 -m recent --rcheck --name block --set But I'm not sure, I'll have to check.

I checked, the iptables devs say that iptables does short circuit evaluation, so the above should work nicely. Best regards, Valentijn