The match extension recent, selected with -M recent
, has the options
--name name
Specify the list to use for the commands.
and
--set
This will add the source address of the packet to the list.
This in itself will do nothing. It is used in together with another rule that references the same list specified by --name
. Thiscan be --rcheck
or --update
.
--rcheck
Check if the source address of the packet is currently in the list.
So there must be another rule somewhere that references --name ssh
.
Ansible is a tool to automatically distribute settings, usually to many targets. It will happily distribute them without caring for the meaning.
You on the other hand should not distribute settings if you don't know what they do.