On Sun, 1 Feb 2004 18:28:22 -0300 "Alexis" <alexis@xxxxxxxxxxxx> wrote: > suppose a limit for pings with limit=1/s and limit burst=5 > > first 5 pings will pass, then, if you have a 2s timeout with the ping, > youll get 3 of 5 pings > > this is first you need to "full" the burst counter, then if no > activity is received the burst will start to decrease until a new unit > could match. > > did you saw this? > > http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-7.html#ss7.3 > Thank you for reminding me of the link. It was helpful. -- Michael K
