diff options
author | Patrick McHardy <kaber@trash.net> | 2007-01-10 14:53:55 +0000 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2007-01-10 14:53:55 +0000 |
commit | b1f568309a09e61f892dee3c23279cecff0b0ff4 (patch) | |
tree | 06295bca2568729fb219dc9c0e57251e89f4399c /extensions/libipt_connlimit.man | |
parent | 83321c034d75278d070192a3125bf176718f60da (diff) |
Remove extensions for unmaintained/obsolete patchlets
Diffstat (limited to 'extensions/libipt_connlimit.man')
-rw-r--r-- | extensions/libipt_connlimit.man | 21 |
1 files changed, 0 insertions, 21 deletions
diff --git a/extensions/libipt_connlimit.man b/extensions/libipt_connlimit.man deleted file mode 100644 index 55e53d14..00000000 --- a/extensions/libipt_connlimit.man +++ /dev/null @@ -1,21 +0,0 @@ -Allows you to restrict the number of parallel TCP connections to a -server per client IP address (or address block). -.TP -[\fB!\fR] \fB--connlimit-above \fIn\fR -match if the number of existing tcp connections is (not) above n -.TP -.BI "--connlimit-mask " "bits" -group hosts using mask -.P -Examples: -.TP -# allow 2 telnet connections per client host -iptables -A INPUT -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT -.TP -# you can also match the other way around: -iptables -A INPUT -p tcp --syn --dport 23 -m connlimit ! --connlimit-above 2 -j ACCEPT -.TP -# limit the nr of parallel http requests to 16 per class C sized \ -network (24 bit netmask) -iptables -p tcp --syn --dport 80 -m connlimit --connlimit-above 16 ---connlimit-mask 24 -j REJECT |