Re: [CentOS] which firewall to automatically block bandwidth abusers?

On Thu, Aug 18, 2011 at 9:38 PM, Mike mike@microdel.org wrote:

...

I have read through that document link on http://lartc.org/lartc.html#AEN1393 and the closest I could get is rate limiting, but that doesn't actually block the IP if it goes over a certain threshold, it just slows everything down.

So I'm not sure I fully understand your requirements.  Why isn't slowing the user to zero or at least near zero sufficient?

How do I slow one user down, without affecting the others? The way I understand rate limiting is that you rate limit a certain protocol / port, or IP / IP range.

So, how would I automatically slow down someone (on any IP address, and accessing any protocol) once he hits a certain threshold / limit?