iptables rate limit

user-pic
Vote 0 Votes

範例: 在 DNS Server 限制每 10 秒的 session 數不能超過 100 (per IP), 超過則 Drop
iptables -I INPUT -p udp --dport 53 -m state --state NEW -m recent --name dnsratelimit --set
iptables -A INPUT -m recent --update --name dnsratelimit --seconds 10 --hitcount 100 -j LOG --log-prefix 'DNS abuse: '
iptables -A INPUT -m recent --update --name dnsratelimit --seconds 10 --hitcount 100 -j DROP

第二行是記錄 Log, name 可以自行定義

1 Comment

| Leave a comment

Hi, Pank. I've been using the pure msn you updated for years. Recently, I'm having a problem that I want to send a messenge to some of my contacts, let's say it is my new cellphoen number. I know how msn would work if I add those contacts, it'd invite them into a group. That would work, I know. Yet, I want the messenge sending to individual contact, eg. MSN virus. I googled you've complie a page http://pank.org/msn/

Would it be okay if you could help me with this? I have PTT acc, NLOVE mail me plz. Much thanks!

Leave a comment

About this Entry

This page contains a single entry by Pank published on July 24, 2011 2:28 AM.

mysqlbinlog and default-character-set=utf8 was the previous entry in this blog.

Microsoft Camera Codec Pack is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Monthly Archives