Let me tell the background first... We have a web server, recently received a lot of requests from oversea proxy. The requests are to spam our applications (i.e. leave comments). They don't success, since they never get the correct captacha. But the problem is: They are doing requests & requests forever (even with no success). This lead to: 1. Waste of CPU time of our web server 2. Waste of oversea bandwidth Can iptables or related tools or packages can do this for me? p.s. Since they are changing proxy all the time, so might be need a automatic solutions, e.g. If a client request the server too frequent in the past 15 minutes, block the client for 1 hour, sth like that Thanks for any comments...