Hi Jan. On Wed, 2010-10-06 at 14:45 +0200, Jan Engelhardt wrote: > > Is there some smart way to just limit the rate on those rejects? e.g. something > > like a "wait with sending the reject for a second" target? > > -m hashlimit --hashlimit 1/second Which one do you mean (just --hashlimit seem to not exist). And as far as I understand the documentation, this is the same as limit, and it's just for matching,... so if the rate is exceeded the rule would simply no longer match and I'd have again such a packet burst? Cheers, Chris. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
