dstlimit patch

dstlimit patch

[Robert]

i'm trying to use the dstlimit patch on netfilter pom-ng. is

iptables -I FORWARD -d IP_address -m dstlimit  --dstlimit 50 --dstlimit-mode 
dstip --dstlimit-name somehost -j ACCEPT

the a good idea?



robert 

Re: dstlimit patch

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 892 bytes --]

On Mon, Mar 01, 2004 at 05:51:42PM +0100, root@lca.one.pl wrote:
> Hi
> Can u send me some examples of using this patch ? i need to stop
> ddosing my ssh port.  sth like this : if there is more than x packets
> from x.x.x.x to localhost:22 DROP :)

Sorry, I'm too overloaded at the moment.  I can hardly manage to only
complete the most important new incoming TODO items every day :(

documenting dstlimit is on my TODO list, though I don't know when I'll
have the time.

> Greatings 
> Jacek Kaczmarczyk

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]