From: bash <0x62ash@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Re: help me (nfcan: addressed to exclusive sender for this address)
Date: Thu, 30 Mar 2006 19:58:26 +0400 [thread overview]
Message-ID: <20060330195826.ef15fbaf.0x62ash@gmail.com> (raw)
In-Reply-To: <000201c653bd$16ea0e40$0101000a@sterenborg.info>
On Thu, 30 Mar 2006 07:45:01 +0200
"Rob Sterenborg" <rob@sterenborg.info> wrote:
> >> $ipt -A [INPUT|FORWARD] -i $IF_LAN -m state --state NEW -s $LAN_NET \
> >> -p tcp --syn -m limit --limit 3/sec -j ACCEPT
> >
> > If just ONE host from my $LAN_NET will exceed this limit, then ALL
> > hosts in $LAN_NET will not able to start new session... and this is
> > bad. I want to limit 3/sec per host, not for all net....
>
> Yes.. :-\
> Maybe this post is of help then.
> http://www.linux-noob.com/forums/index.php?showtopic=1829
I saw it... "-m recent" has only 1 second sampling... i cant handle
situaton of 3/sec and etc.....
I found "-m dstlimit" module which is handy, *but* for my situation i
wanna the same but with limit the packet rate on a per SOURCE ip....
inverted dstlimit :)
Any ideads? :/
--
Biomechanica Artificial Sabotage Humanoid
prev parent reply other threads:[~2006-03-30 15:58 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-03-29 0:19 help me bash
2006-03-29 1:50 ` John A. Sullivan III
2006-03-29 3:29 ` bash
2006-03-29 4:22 ` help me (nfcan: addressed to exclusive sender for this address) Jim Laurino
2006-03-29 17:54 ` bash
2006-03-29 18:28 ` Rob Sterenborg
2006-03-29 19:14 ` bash
2006-03-30 5:45 ` Rob Sterenborg
2006-03-30 15:58 ` bash [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060330195826.ef15fbaf.0x62ash@gmail.com \
--to=0x62ash@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.