diff options
| author | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org </C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org> | 2005-04-01 06:54:23 +0000 |
|---|---|---|
| committer | /C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org </C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org> | 2005-04-01 06:54:23 +0000 |
| commit | 6f5d18486aeaabc05d0aaa57708dbf18cc72af5b (patch) | |
| tree | e0d8b16f1fe5c33ce1bc2a0e2ab9a68f2e54f96c /extensions/libipt_hashlimit.man | |
| parent | 25632080c73a48deff44d81d9f85332141591420 (diff) | |
add lots of man pages (Jonas Berlin)
Diffstat (limited to 'extensions/libipt_hashlimit.man')
| -rw-r--r-- | extensions/libipt_hashlimit.man | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/extensions/libipt_hashlimit.man b/extensions/libipt_hashlimit.man new file mode 100644 index 0000000..1b0a5d4 --- /dev/null +++ b/extensions/libipt_hashlimit.man @@ -0,0 +1,35 @@ +This patch adds a new match called 'hashlimit'. +The idea is to have something like 'limit', but either per +destination-ip or per (destip,destport) tuple. + +It gives you the ability to express +.IP + '1000 packets per second for every host in 192.168.0.0/16' +.IP + '100 packets per second for every service of 192.168.1.1' +.P +with a single iptables rule. +.TP +.BI "--hashlimit " "rate" +A rate just like the limit match +.TP +.BI "--hashlimit-burst " "num" +Burst value, just like limit match +.TP +.BI "--hashlimit-mode " "destip | destip-destport" +Limit per IP or per port +.TP +.BI "--hashlimit-name " "foo" +The name for the /proc/net/ipt_hashlimit/foo entry +.TP +.BI "--hashlimit-htable-size " "num" +The number of buckets of the hash table +.TP +.BI "--hashlimit-htable-max " "num" +Maximum entries in the hash +.TP +.BI "--hashlimit-htable-expire " "num" +After how many miliseconds do hash entries expire +.TP +.BI "--hashlimit-htable-gcinterval " "num" +How many miliseconds between garbage collection intervals |