Re: IPLIMIT Patch UDP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 20 February 2003 06:50 pm, "Ing. CIP Alejandro Celi " 
Mariategui wrote:
> (Sorry, but my english is very bad)
>
> Hi,
>
> I compile with p-o-m the server kernel with IPLIMIT Patch by Gerd
> Knorr <kraxel@bytesex.org>
>
> It work fine, i can limit ex: max 10 TCP connections on the server,
> but i want to limit the UDP connections to 10 (max).
>
> How I can do it?
>
> Alex

The IPLIMIT patch is limited to only work with TCP.  You'd likely need to 
write your own changes to the kernel.  At a VERY quick glance, this:

+	/* refuse anything but tcp */
+	if (ip->proto != IPPROTO_TCP)
+		return 0;

in the IPLIMIT patch (in iplimit.c) MIGHT provide the solution if it 
accomodated IPPROTO_UPD as well as, or instead of, IPPROTO_TCP.

j




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux