You could possibly do it per IP if you combine the rules with the RECENT p-o-m patch... read the patch o matic help file on this RECENT patch and it'll give you what you want. Thanks, ____________________________________________ George Vieira Systems Manager georgev@xxxxxxxxxxxxxxxxxxxxxx Citadel Computer Systems Pty Ltd http://www.citadelcomputer.com.au -----Original Message----- From: Nauman Malik [mailto:naumanm@xxxxxxxxxxxxxx] Sent: Saturday, 27 September 2003 10:34 PM To: Wu Nick; netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: What is the limitation of iptables's limit option? One more question related to this. Can we limit no. of icmp packets per IP address? Or shall it limit total no. of ICMP packets from all the source IP's.