Re: rate limit by MAC

[Покотиленко Костик <casper@xxxxxxxxxxxx>]

В Срд, 01/07/2009 в 16:44 +0100, Jorge Bastos пишет:
> > You might be able to...
> >
> > iptables -A FORWARD -m mac --mac-source <<mac address>> -m limit
> > --limit 100/s -j ACCEPT would restrict the given mac address to 100
> > packets per second... but depending on how many mac addresses you have
> > it might be too much to enter each rule...
> 
> Sawing this thread,
> Iptables doesn't (still) have the capacity to do rate limit by itself,
> does it?

Depends on what the "rate" is, packets/time - yes, bytes/time - no.

-- 
Покотиленко Костик <casper@xxxxxxxxxxxx>

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html