Centos 5.0 x86_64: need help adding connlimit module to iptables
my company is using Centos 5.0(final), kernel 2.6.18-8.e15 x86_64 for web server. Recently, the server is always under DDOS state and I need some updates on current iptables rules to limit number of connections per IP. However, it seem that my linux box dont support connlimit in iptables currently (I alway get error when run iptables command with connlimit parameter. I need to patch & compile kernel to add connlimit module to iptables.
I have never done this job before, therefore I'm not really confident to do on production server without a guide. I have spent much time in google for an appropriate guide but not luck.
Please help me..
Last edited by thanhlong; 07-13-2008 at 06:29 AM.