Is there any way to rate limit on a host by host basis

Anders Blomdell anders.blomdell at control.lth.se
Tue Feb 3 11:42:18 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think this is how it could be done directly in iptables:

/usr/sbin/iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --set
/usr/sbin/iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 -j DROP

/Anders
- -- 
Anders Blomdell                  Email: anders.blomdell at control.lth.se
Department of Automatic Control
Lund University                  Phone:    +46 46 222 4625
P.O. Box 118                     Fax:      +46 46 138118
SE-221 00 Lund, Sweden

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJU0LQYAAoJENZYyvaDG8NcKWkIAIeZSEKMgAistrJXx9AiT8Tm
oFat8Ndcn7LZbdfoTL8unsq7A8UQuTAsGa+Hg04x6i5707oWA5+jEpU5/xo2zmmn
zLGwmfiAhlFhClxNpo7DuF3IIWHDfyOTYLtmWcVpoCjExzO8znBdpcSIw0cBRh3S
9ziYuB6C7dt0vFUpGqjfdYqXP25IctAgDB+HN7DnFCMmVuzpjQvxEH73dgs5R3FD
lZ39kAS6iy7sAbzwHKjq/b/mQ5oBgmVWoBQxOLkpP6OFz64Ng7SepOubmCJlx2+5
/uII9NsrHqJ8LaaeaxoX/ZWPQkfKbKmURC/CoYUl6QXhAXNhgzc31MZYcqrDTJQ=
=VsM5
-----END PGP SIGNATURE-----


More information about the firewalld-devel mailing list