Re: iptables connlimit

[Bernd Eckenfels <ecki@lina.inka.de>]

In article <[🔎] 20050307234755.6da6e36a.gygy@rdslink.ro> you wrote:
>> >server# iptables -A INPUT -p tcp --dport 80 -m connlimit --connlimit-above
>> >3 -j REJECT --reject-with tcp-reset

Have  you tried:

iptables -m connlimit -h 

does it show the connlimit options?

BTW: my iptables manpage knows about -m connrate  --connrate <from>:<to>,
but it is clearly not available on my system.

Perhaps it is easiest if you strace the command. Also try to skip single
parameters (like --reject-with tcp-reset)

Greetings
Bernd