summaryrefslogtreecommitdiffstats
path: root/src/mini-gmp.c
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2018-05-31 18:08:06 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2018-06-06 15:49:47 +0200
commit57e4a095edc4dab19e14fc8d1bca3febde1ca86c (patch)
treec51aaa1f1d3a6d1b42d2ee3da073b46289524ea5 /src/mini-gmp.c
parent3384849c113b1ec3906c7a22cc71d708aae1218e (diff)
src: connlimit support
This patch adds support for the new connlimit stateful expression, that provides a mapping with the connlimit iptables extension through meters. eg. nft add rule filter input tcp dport 22 \ meter test { ip saddr ct count over 2 } counter reject This limits the maximum amount incoming of SSH connections per source address up to 2 simultaneous connections. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/mini-gmp.c')
0 files changed, 0 insertions, 0 deletions