<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">Don't know Alan. I've never heard of a "Maximum prefix length". And I use similar rules in all our BQ and BX servers.
<br />
<br />OH - I see. Its the string to insert into the log entry - it can only be 29 characters long. So when you tried it, it counted up "</font><font size="2">Connect attempt from 213.80.73 network in Sweden " and came up with more than 29 characters. Try something shorter, like "Sweden 213.80.73 ". Yep - that works.
<br />
<br />
<br />
<br />Chuck
<br />
<br />
<br /></font><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Alan Kline <alan@snugglebunny.us>
<br />
To: BlueOnyx General Mailing List <blueonyx@blueonyx.it>
<br />
Sent: Thu, 06 May 2010 16:38:25 -0500
<br />
Subject: [BlueOnyx:04418] Re: can't stop this attack
<br />
<br />> When I added this rule, I got this error message:
<br />>
"Maximum prefix length 29 for --log-prefix"
<br />>
<br />>
Once I cut the prefix way down, it worked... Is there any way to change
<br />>
that maximum length?
<br />>
<br />>
Alan
<br />>
<br />>
On 5/6/2010 4:21 PM, Chuck Tetlow wrote:
<br />>
> And if you want to see how many times they try to get in (whether your are
reporting it or just curious), AFTER running that command - run this one:
<br />>
>
<br />>
> /sbin/iptables -I acctin 1 -s 213.80.73.0/24 -j LOG --log-prefix
"Connect attempt from 213.80.73 network in Sweden "
<br />
<br />
</font>
</BODY>
</HTML>