Is this posible with iptables ?

koye78 · 03-30-2006, 11:40 AM

Hi
I dont know if this is posible with iptables, you are here to help

I want to do something like this:
"If some IP connect on server port more then 10 times in 10 seconds ban that IP for 24 hours"
I try to do this with recent and limit modules but i didnt have success
Meaby this cant be done wtih iptables .... then recomend me some tool that is capable to do this.
Thanks
Best regards

fr_laz · 03-30-2006, 12:09 PM

Hi,

i think that's doable with iptables.
have a look at the "recent" match, maybe that could do it.
another solution may be to use the limit match, and then i think in the 2.6.13 kernel there's an action target that can be use to run another iptables command (in your case it would be a rule droping the packets...). Unfortunatly, the 2.6.13 kernel i have is at the office, so i can't have a quick check now.
I hope this helps... don't take for granted the above statements... i think it can work ;o)