From mboxrd@z Thu Jan 1 00:00:00 1970 From: Deti Fliegl Subject: Re: Can i have a rate limit per source IP Address in IPSet? Date: Fri, 06 Oct 2006 09:40:00 +0200 Message-ID: <45260850.4000108@fliegl.de> References: <4524B968.303@fliegl.de> <4524D64C.4070203@fliegl.de> <4524DAB8.9000409@fliegl.de> <4524E849.5020604@fliegl.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: To: Retesh Chadha In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Hi, Retesh Chadha wrote: > I have another question though. I now need to set a limit per src dst > pair, but I get a bad mode for hashlimit-mode srcipdstip. > I give the following command - > > iptables -A INPUT_CHAIN --match hashlimit --hashlimit 1000/s > --hashlimit-mode srcip-dstip --hashlimit-name foo -m set --set KNOWN > src,dst -j ACCEPT There is a minor documentation bug: '--hashlimit-mode srcip,dstip' should work for you. Deti