connlimit

["php0t" <php0t@zorro.hu>]

  Dear developers,

I've had a nice time trying to limit connections. The kernel is
2.6.17.8.
Apart from the first couple of annoyances (such as the patch being
renamed from iplimit to connlimit, patch-o-matic not being able to apply
it to the current kernel etc), I've managed to patch manually, compile
it as a module and load it.

  However, when I try to add an according test rule, I get the 'Invalid
argument' error, and dmesg says:
ip_tables: connlimit match: invalid size 0 != 16

I also tried going to the site mentioned in the latest pom-ng's
source.list:

# ipp2p, time, IPMARK and connlimit maintained by Krzysztof Oledzki
<ole@ans.pl>
http://people.netfilter.org/ole/pom/

But all I get is a smiley :)

When I google for my current problem, most suggest that connlimit is
out-of-date, nobody cares about it any more, etc.

As I'm no C coder, my two questions are,
1) what could I do  to make this work ? Are there any similar modules
available that are stable?
2) could it be possible to stabilize this patch and have it added to the
kernel source? There are so many iptables extensions and modules by
default that are probably rarely used, why is this (IMHO very basic)
feature excluded?

  Thanks for reading and any replies
P.