Hello, >Any clue ? You're on the right track. Just use "hashlimit" module instead of "limit".Use option "--hashlimit-mode srcip". All necessary info is in iptables manpage. Best regards, Marek -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html