Hello list , I have these codes before my incoming rules as a sync flood protection ````````````` # Check hashlimit-htable-expire after 5 min ( 300000 mili second ) iptables -N syn-flood iptables -A INPUT -i $IFACE -p tcp --syn -j syn-flood iptables -A syn-flood -p tcp --syn -m hashlimit \ --hashlimit 4/sec --hashlimit-burst 4 --hashlimit-htable-expire 300000 \ --hashlimit-mode srcip --hashlimit-name testlimit -j RETURN # Drop IP bad IP and put then in blacklist iptables -A syn-flood -m recent --name blacklist --set -j DROP iptables -A INPUT -j syn-flood ```````````````````````````````````` and this makes the sites running at the server very slow, if I comment the above again the sites running well. What might be the safe options of --hashlimit 4/sec --hashlimit-burst 4 to get back the normal apache connection ? Thanks -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
