On Tuesday 2012-05-15 00:45, Payam Chychi wrote: >> I'm playing with match modules limit and hashlimit, and they appear to >> be limited to match a maximun 100/sec. If I use hashlimit with no >> "--hashlimit-mode" I get the same, a max of 100/sec, even if I set for >> exemple to 250/sec. My command setting the 250/sec is accepted, with >> no error, but test show only 100 match/sec. >> >> Is this a hard limit of this modules, or I can go above this in some way? > >limit and hashlimit have never worked properly Best is to collect packets using -j RATEEST and then matching against it with -m rateest. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html