Re: iptables rules to limit attack, connlimit

[Sergej Kandyla <sk.paix@xxxxxxxxx>]

Kai Schaetzl пишет:> There are numerous tutorials out there how to use ratelimiting. Just > google.>> Kai>>   Does anyone know how to implement some functional provided by patch-o-matic without patching the kernel ?
centos5.2 box # iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 15 -j REJECTiptables: Unknown error 4294967295
The idea is to limit established connections for every unique ip. This very helpful on the high-loaded web servers.May be some alternatives ?_______________________________________________CentOS mailing listCentOS@xxxxxxxxxxxxxx://lists.centos.org/mailman/listinfo/centos