Hello,
Was playing with the iptables and suddenly had the problem.

I'v tried to add the following rule to limit number of connections to 80 port:

-A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 5 -j REJECT


And get the following error in /var/log/messages:

kernel: ip_tables: connlimit match: invalid size 32 != 16

Do zcat /proc/config.gz | grep -i connlimit and get CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=y - so connlimit is supported by the kernel?

Is it possible to load connlimit iptables module or it is a bug?

OS: Debian 4.0
IPTables: 1.3.6.0

I have seen messages sorta like that when iptables was built against a different kernel than that which is running. I don't know which distro you are using, but that may be the direction to start looking.

IPtables was installed using apt-get, so I think the problem is not in compatibility.

Actually, it very well could be.

Linodes use custom built kernels, not the "standard" kernel.

_________________
Jay Faulkner
http://oldos.org

the size 32 != 16 sounds like one piece wants a shortword and the other a longword. a sanity check, in other words...