From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH] ipt_account rate patch Date: Tue, 20 Jun 2006 15:49:10 +0200 Message-ID: <4497FCD6.2000706@trash.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: To: Amin Azez In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Amin Azez wrote: > Here are some patches I did for ipt_account before ipt_ACCOUNT which > supports larger subnets was re-released. > > As well as per-ip packet and byte counting, the patches also does per-ip > rate calculating, so you can use this as part of a rate limiting rule > and drop packets that would exceed the rate. > > You get to choose whether or not dropped packets should also be accounted. > > Just as ipt_account supports total-subnet accounting, so we also support > total-subnet rate calculations as well. > > The rate calculations are an improved version of what is in > ip_conntrack_rate.c, namely we can handle the timer wraps around zero. How do you want me to handle this? The account patch is no longer in pom, the extension is still part of iptables. Do you want me to apply the iptables part or do you simply want to add it as an iptables.patch to the account repository?