> You might be able to... > > iptables -A FORWARD -m mac --mac-source <<mac address>> -m limit > --limit 100/s -j ACCEPT would restrict the given mac address to 100 > packets per second... but depending on how many mac addresses you have > it might be too much to enter each rule... Sawing this thread, Iptables doesn't (still) have the capacity to do rate limit by itself, does it? Jorge, -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html