Mailinglist Archive: opensuse (1632 mails)

< Previous Next >
Re: [opensuse] dictionary attacks
  • From: Joe Sloan <joe@xxxxxxxxxx>
  • Date: Tue, 17 Jul 2007 21:17:34 -0700
  • Message-id: <0A851299-0DA5-408A-B3A5-A1030B9175B0@xxxxxxxxxx>

On Jul 17, 2007, at 1:34 PM, Richard Creighton wrote:



Patrick Shanahan wrote:
* Richard Creighton <ricreig@xxxxxxxxx> [07-17-07 16:09]:
Starting Firewall Initialization (phase 2 of 2) SuSEfirewall2: Warning:
ip6tables does not support state matching. Extended IPv6 support disabled.
SuSEfirewall2: Error: unknown parameter name=ssh in
FW_SERVICES_ACCEPT_EXT -> 0/0,tcp, 22,,hitcount=3,blockseconds=120,name=ssh

yes, the line is wrong  :^(

FW_SERVICES_ACCEPT_EXT="0/0,tcp, 22,,hitcount=3,blockseconds=120,recentname=ssh"


I had that line in there originally and the error message stated that
'recentname' was wrong also so I changed it based upon 'man iptables',
but apparently that also isn't right for susefirewall2 syntax.

That said, I am going to plug that line in using cut and paste and
reboot the machine and pray :)   Thanks for your help....

Prayer is cool, but why a reboot? This isn't windoze, no need. Just tell the firewall to reload, takes a second.

Joe
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups