Re: fail2ban increase loadaverage to 18

[Max <cryptosonbian@ukr.net>]

connlimit - allows you to limit the number of simultaneous open 
connections to each IP-address (or subnet).

/iptables/sbin -p tcp -syn -dport 22 -m connlimit -connlimit-above 3 -j DROP

this command allows up to three simultaneous connection requests to our 
ssh-server with one IP-address.



19.08.2012 21:40, Michelle Konzack пишет:
> Hello Max,
>
> Am 2012-08-19 01:06:15, hacktest Du folgendes herunter:
> > It is necessary to limit the number of connections to
> > sshwithiptables, for example:
> > /iptables/sbin -p tcp -syn -dport 22-m connlimit -connlimit-above 3 -j DROP
> Oops... I have locked me out!
>
> I am right, this DROP from any IP addresses connections,  if  there  are
> more then 3 at the same time?
>
> My automated scripts and several 100 embedded security  systems  hit  the
> limits.
>
> Question:   Is there a possibility to set a TIME LIMIT
>              together with the above iptables line?
>
> Thanks, Greetings and nice Day/Evening
>      Michelle Konzack