Kai Schaetzl пишет: > There are numerous tutorials out there how to use ratelimiting. Just > google. > > Kai > > Does anyone know how to implement some functional provided by patch-o-matic without patching the kernel ? centos5.2 box # iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 15 -j REJECT iptables: Unknown error 4294967295 The idea is to limit established connections for every unique ip. This very helpful on the high-loaded web servers. May be some alternatives ?