From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-1?Q?Fatih_D=FCzova?= Date: Fri, 24 Jun 2005 11:28:26 +0000 Subject: Re: [LARTC] where s filtering done? Message-Id: <103339c8050624042879b2c6df@mail.gmail.com> List-Id: References: <103339c805062309076e092497@mail.gmail.com> In-Reply-To: <103339c805062309076e092497@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Thank you! you are really great. I m sure I m getting make u bored with my questions due to being a newbie in iptables tool, but I wonder whether it could be done on a determined IP address or a port such as 80, instead of icmp packets? Thanks, FD On 6/24/05, Dmytro O. Redchuk wrote: > On Fri, Jun 24, 2005 at 01:40:50PM +0300, Fatih D?zova wrote: > > Thank you for the suggestion you gave. > > Could you give me a simple example of "iptables ... --match random > > --average ..." ?, because I could not understand how to > > implement it.. > > Thank you, > Mmmm... Let me try... > > Oh sorry... My distro lacks libipt_random.so %) > > Anyway I would try something like: > > # iptables -A INPUT --match random --average 10 \ > --protocol icmp --icmp-type echo-reply -j DROP > > or > > # iptables -A OUTPUT --match random --average 10 \ > --protocol icmp --icmp-type echo-request -j DROP > > > ... to achieve 10% drop of echo replies for local machine. > > > > Sorry, I must submit a bug to bugzilla :-) see you.. > > > > > FD > > -- > _,-=._ /|_/| > `-.} `=._,.-=-._., @ @._, > `._ _,-. ) _,.-' > ` G.m-"^m`m' Dmytro O. Redchuk > > _______________________________________________ > LARTC mailing list > LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc > _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc