Something along these lines should do the job for ya. iptables -A INPUT -s 0.0.0.0/0 -d x.x.x.x/32 -m hashlimit --hashlimit 200 --hashlimit-mode dstip -j LOG iptables -A INPUT -s 0.0.0.0/0 -d x.x.x.x/32 -j DROP Dig around on this site for more details. http://iptables-tutorial.frozentux.net/iptables-tutorial.html -----Original Message----- From: centos-bounces@xxxxxxxxxx [mailto:centos-bounces@xxxxxxxxxx] On Behalf Of ann kok Sent: Wednesday, June 20, 2007 10:46 AM To: centos@xxxxxxxxxx Subject: iptables question Hi all Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x thank you ________________________________________________________________________ ____________ Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos