[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: fail2ban increase loadaverage to 18

connlimit - allows you to limit the number of simultaneous open connections to each IP-address (or subnet).

/iptables/sbin -p tcp -syn -dport 22 -m connlimit -connlimit-above 3 -j DROP

this command allows up to three simultaneous connection requests to our ssh-server with one IP-address.

19.08.2012 21:40, Michelle Konzack пишет:
Hello Max,

Am 2012-08-19 01:06:15, hacktest Du folgendes herunter:
It is necessary to limit the number of connections to
sshwithiptables, for example:
/iptables/sbin -p tcp -syn -dport 22-m connlimit -connlimit-above 3 -j DROP
Oops... I have locked me out!

I am right, this DROP from any IP addresses connections,  if  there  are
more then 3 at the same time?

My automated scripts and several 100 embedded security  systems  hit  the

Question:   Is there a possibility to set a TIME LIMIT
             together with the above iptables line?

Thanks, Greetings and nice Day/Evening
     Michelle Konzack

Reply to: