On Sun, 2009-04-12 at 12:12 -0700, Tom Eastep wrote:
> Karsten Bräckelmann wrote:
> > On Tue, 2009-04-07 at 09:12 -0700, Tom Eastep wrote:
> > > ACCEPT net fw tcp 22 - - s:ssh:3/min
> > >
> > > This will limit SSH connections from net->fw to 3 per minute.
> >
> > Sweet! So this effectively supersedes the Limit [1] action?
> >
> > I assume it also uses the recent match -- does it actually generate the
> > same iptables rules?
>
> It uses hashlimit.
Ah, you got me there -- could you elaborate? Does it actually supersede
the Limit action?
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
