[CentOS] iptables rules to limit attack, connlimit

[Sergej Kandyla]

Kai Schaetzl пишет:
> There are numerous tutorials out there how to use ratelimiting. Just 
> google.
>
> Kai
>
>   
Does anyone know how to implement some functional provided by 
patch-o-matic without patching the kernel ?

centos5.2 box # iptables -A INPUT -p tcp --syn --dport 80 -m connlimit 
--connlimit-above 15 -j REJECT
iptables: Unknown error 4294967295

The idea is to limit established connections for every unique ip. This 
very helpful on the high-loaded web servers.
May be some alternatives ?