diff --git a/doc/debian_build_doc.md b/doc/debian_build_doc.md index fe40f2982..27792b2ce 100644 --- a/doc/debian_build_doc.md +++ b/doc/debian_build_doc.md @@ -86,7 +86,7 @@ $IPT -A INPUT -p tcp --dport 43 -i eth0 -m state --state NEW -m recent --rcheck #### EPP -We need to update iptables hitcounter from application. +Iptables hitcounter is updated by application. ```` #!/bin/bash @@ -103,3 +103,11 @@ DACTION="REJECT" $IPT -A INPUT -p tcp --dport 700 -i eth0 -m state --state NEW -m recent --set $IPT -A INPUT -p tcp --dport 700 -m recent --name $REGISTRAR_CODE --rdest --rcheck --hitcount ${BLOCKCOUNT} --seconds ${SECONDS} -j ${DACTION} ```` + +After adding iptable counters, please add correct permissions to proc files at path /proc/net/xt_recent + +Example command: + +```` +sudo chown registry /proc/net/xt_recent/* +````