В Срд, 01/07/2009 в 16:44 +0100, Jorge Bastos пишет: > > You might be able to... > > > > iptables -A FORWARD -m mac --mac-source <<mac address>> -m limit > > --limit 100/s -j ACCEPT would restrict the given mac address to 100 > > packets per second... but depending on how many mac addresses you have > > it might be too much to enter each rule... > > Sawing this thread, > Iptables doesn't (still) have the capacity to do rate limit by itself, > does it? Depends on what the "rate" is, packets/time - yes, bytes/time - no. -- Покотиленко Костик <casper@xxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
