2009/7/1 Самусенко Андрей <samusenko@xxxxxx>: > Hi! > > Can iptables limit rate by MAC? Think it no. > > What on Linux can do how i need? > > -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html > You might be able to... iptables -A FORWARD -m mac --mac-source <<mac address>> -m limit --limit 100/s -j ACCEPT would restrict the given mac address to 100 packets per second... but depending on how many mac addresses you have it might be too much to enter each rule... The hashlimit might be better if you can use ip addresses instead of mac addresses. -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
