[CentOS] iptables rules to limit attack, connlimit

Fri Feb 27 10:46:37 UTC 2009
Sergej Kandyla <sk.paix at gmail.com>

Kai Schaetzl пишет:
> There are numerous tutorials out there how to use ratelimiting. Just 
> google.
>
> Kai
>
>   
Does anyone know how to implement some functional provided by 
patch-o-matic without patching the kernel ?

centos5.2 box # iptables -A INPUT -p tcp --syn --dport 80 -m connlimit 
--connlimit-above 15 -j REJECT
iptables: Unknown error 4294967295

The idea is to limit established connections for every unique ip. This 
very helpful on the high-loaded web servers.
May be some alternatives ?