Sorry if you have gotten this multiple times, I keep getting bounce backs from my server. I figured out the issue after a lot of trial and error. I had to edit the Makefile under the extensions directory for the iptables source. I also had to go to the CVS and download the libipt_connlimit.c code and stick it in the extensions directory. In the Makefile, edit the PF_EXT_SLIB: line (about the 8th down), where you see a list of the other extensions (ah conntrack dscp ecn esp helper etc...). Somewhere in there add connlimit. At this point you should be able to compile iptables and use the connlimit match as long as you have already patched the kernel and compiled it properly. Hope this Helps Josh Berry
