Comment 3 for bug 951462

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

What should happen is at the time of the check, ufw should:
1. add a test chain that isn't referenced by anything: ip6tables -N ufw6-test
2. Add test rules to the test chain:
ip6tables -A ufw6-test -m state --state NEW -m recent --set
ip6tables -A ufw6-test -m state --state NEW -m recent --update --seconds 30 --hitcount 6 -j ACCEPT
3. Clean up the test chain
ip6tables -F ufw6-test
ip6tables -X ufw6-test

If the test rules load in step 2, then we have the support we need for limit to work.