Re: DOS attack--Prob with iptables.pls reply urgent!!!!!

["Daniel Givens" <daniel@rugmonster.org>]

On 3/23/06, Pablo <paa-listas@argentina.com> wrote:
> Can this work:
>
>         iptables -A INPUT -p icmp -m limit --limit 3/hr -j DROP ; droping
> only 3 pings per hour?

You first set the limit of how many you want to accept, then once that
limit is passed, it goes to the next rule, which is to drop it.  The
original message asked how to limit the pings to only three allowed
and then the rest blocked.  You're rule blocks the first three and
provided you have the policy set to allow, allow the rest.

~Daniel