> does anybody know how to drop packets with > destination-port 80 after a limit of connections > has been reached? > i'd like to deny access for the attacker as soon > as a cgi-scan has been detected. > > is it possible to do that with iptables? The patch-o-matic module iplimit can do exactly that. //Jesper
