summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_limit.man
blob: 84b63d4e1532d7c4ddea694d9871e717b06527b8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
This module matches at a limited rate using a token bucket filter.
A rule using this extension will match until this limit is reached
(unless the `!' flag is used).  It can be used in combination with the
.B LOG
target to give limited logging, for example.
.TP
.BI "--limit " "rate"
Maximum average matching rate: specified as a number, with an optional
`/second', `/minute', `/hour', or `/day' suffix; the default is
3/hour.
.TP
.BI "--limit-burst " "number"
Maximum initial number of packets to match: this number gets
recharged by one every time the limit specified above is not reached,
up to this number; the default is 5.