From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@vger.kernel.org>
Subject: Re: stateful tracking options
Date: Tue, 27 Nov 2007 16:39:15 -0600 [thread overview]
Message-ID: <474C9C93.1030206@riverviewtech.net> (raw)
In-Reply-To: <4d7bf97f0711271328r6eb542fcq284443db6bf6efa2@mail.gmail.com>
On 11/27/07 15:28, Quartexx wrote:
> is possible to use stateful tracking options?
Yes
> I mean set limits related to filter rules that create state entries;
>
> for example: limit the number of source IP addresses that can
> simultaneously create state, or limit the rate of new connections to
> a certain amount per time interval.
I'd say that you could do something with the recent match extension /
target. This would allow you to do some things in conjunction to
whether or not a given source ip address in in a given recent list (you
can have multiple) or not in a (user) specified amount of time.
You would end up checking a recent list to see if the given source
qualifies to alter state or not.
Grant. . . .
prev parent reply other threads:[~2007-11-27 22:39 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-11-27 21:28 stateful tracking options Quartexx
2007-11-27 22:39 ` Grant Taylor [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=474C9C93.1030206@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox