I want to block any client that sends an NTP packet more than 10 per
second. I'm trying to implement an IPTables rule to do this:

iptables -A INPUT -p udp -m limit --dport 123 --limit 10/s -j DROP

It is matching and blocking SOME packets, but definitely not the bulk of
them. Has anyone use IPTables to limit the rate packets are accepted?
Any sage advice for me?

-- 
Scott Baker - Canby Telcom 
System Administrator - RHCE - 503.266.8253

_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool

Reply via email to