xt_recent

[martzuk]

Hi,

I'm trying to modify the settings of xt_recent to allow a greater hitcount of 20, however I'm struggling to work out how.

Running modprobe ipt_recent gives me:

modprobe: module ipt_recent not found in modules.dep

instmod ipt_recent gives me:

insmod: 'ipt_recent.ko': module not found

Googling tells me to run:

/sbin/modprobe ipt_recent ip_list_tot=2000 ip_pkt_list_tot=255

Anybody able to modify the max number of packets remembered some how?

 

[RMerlin]

xt_recent is compiled in the kernel, not as an external module.

 

[martzuk]

xt_recent is compiled in the kernel, not as an external module.

Is there a way that I could possibly change this value?

 

[RMerlin]

Is there a way that I could possibly change this value?

Check under /sys/module/ipt_recent/parameters/ if there are entries for the various supported parameters. If yes, set parameters by echoing values there. For example:

echo 255 > /sys/module/ipt_recent/parameters/ip_pkt_list_tot

Put these commands in a firewall-start script.

 

[martzuk]

That directory doesn't seem to exist:

admin@RT-AC68U:/tmp/home/root# cd /sys/module/
8250/                    ehci_hcd/                ip6table_filter/         mii/                     nf_conntrack_tftp/       qmi_wwan/                tcp_cubic/               xhci_hcd/
asix/                    emf/                     ip6table_mangle/         nf_conntrack/            nf_nat_ftp/              rndis_host/              tfat/                    xt_recent/
cdc_ether/               et/                      ipt_account/             nf_conntrack_ftp/        nf_nat_h323/             sch_htb/                 thfsplus/                zlib_deflate/
cdc_mbim/                ext2/                    ipv6/                    nf_conntrack_h323/       nf_nat_pptp/             scsi_mod/                tntfs/
cdc_ncm/                 ext3/                    jbd/                     nf_conntrack_ipv4/       nf_nat_proto_gre/        scsi_wait_scan/          usb_storage/
cdc_wdm/                 ext4/                    jbd2/                    nf_conntrack_pptp/       nf_nat_rtsp/             sd_mod/                  usbcore/
cdrom/                   fuse/                    jffs2/                   nf_conntrack_proto_gre/  nf_nat_sip/              sg/                      usblp/
crc16/                   igs/                     kernel/                  nf_conntrack_rtsp/       ohci_hcd/                spurious/                usbnet/
dns_resolver/            ip6t_LOG/                mbcache/                 nf_conntrack_sip/        printk/                  sr_mod/                  wl/

 

[RMerlin]

That directory doesn't seem to exist:

admin@RT-AC68U:/tmp/home/root# cd /sys/module/
8250/                    ehci_hcd/                ip6table_filter/         mii/                     nf_conntrack_tftp/       qmi_wwan/                tcp_cubic/               xhci_hcd/
asix/                    emf/                     ip6table_mangle/         nf_conntrack/            nf_nat_ftp/              rndis_host/              tfat/                    xt_recent/
cdc_ether/               et/                      ipt_account/             nf_conntrack_ftp/        nf_nat_h323/             sch_htb/                 thfsplus/                zlib_deflate/
cdc_mbim/                ext2/                    ipv6/                    nf_conntrack_h323/       nf_nat_pptp/             scsi_mod/                tntfs/
cdc_ncm/                 ext3/                    jbd/                     nf_conntrack_ipv4/       nf_nat_proto_gre/        scsi_wait_scan/          usb_storage/
cdc_wdm/                 ext4/                    jbd2/                    nf_conntrack_pptp/       nf_nat_rtsp/             sd_mod/                  usbcore/
cdrom/                   fuse/                    jffs2/                   nf_conntrack_proto_gre/  nf_nat_sip/              sg/                      usblp/
crc16/                   igs/                     kernel/                  nf_conntrack_rtsp/       ohci_hcd/                spurious/                usbnet/
dns_resolver/            ip6t_LOG/                mbcache/                 nf_conntrack_sip/        printk/                  sr_mod/                  wl/

It's xt_recent (ipt_recent is on a different kernel version).

 

[martzuk]

Ah yes!

On a slightly different topic, I'm struggling to try and use tc as an alternate method. Other scripts seem to list an imq device, which cannot be found on this (RT-AC68U).

Is there a somewhere I should look? Searching the forums doesn't bring up much.

 

[RMerlin]

Ah yes!

On a slightly different topic, I'm struggling to try and use tc as an alternate method. Other scripts seem to list an imq device, which cannot be found on this (RT-AC68U).

Is there a somewhere I should look? Searching the forums doesn't bring up much.

The imq target is not available on the ARM-based models such as the RT-AC68U. Enabling that option causes the skb kernel structure to change format, which breaks closed source modules such as the wireless driver from Broadcom which expect the original skb structure. It's only available on MIPS models because Asus are compiling the wireless driver with that kernel option already enabled.

That's one of the problems Shibby encountered when porting Tomato to ARM, as Tomato's QoS design relies on IMQ. He was getting kernel panics at boot time with that option enabled.

 

[martzuk]

Ah ok, never mind

Thanks for all the help!