diff -ru ipt-orig/extensions/libipt_connlimit.man ipt-new/extensions/libipt_connlimit.man --- ipt-orig/extensions/libipt_connlimit.man 2005-03-31 22:54:23.000000000 -0800 +++ ipt-new/extensions/libipt_connlimit.man 2006-05-29 08:50:24.000000000 -0700 @@ -10,10 +10,10 @@ Examples: .TP # allow 2 telnet connections per client host -iptables -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT +iptables -A INPUT -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT .TP # you can also match the other way around: -iptables -p tcp --syn --dport 23 -m connlimit ! --connlimit-above 2 -j ACCEPT +iptables -A INPUT -p tcp --syn --dport 23 -m connlimit ! --connlimit-above 2 -j ACCEPT .TP # limit the nr of parallel http requests to 16 per class C sized \ network (24 bit netmask)