"-m limit --limit-burst 20" with my Netfilter doesn't work probably

hdinn · 08-20-2009, 04:18 AM

hello everybody,

well i try to put this rule in Netfilter

Code:

iptables -A FORWARD -p udp -m limit --limit-burst 20 -j DROP

but when i sniff the traffic with Wireshark or tcpdump i found only 17 packets are dropped and some times 16.

and when i want to drop 200 packets i finf only 75 packets were dropped.

is there s.thing with the rule?? s.one told me about NFqueue, but i didn't understand.

plz help

hdinn · 08-20-2009, 07:49 AM

no one have an answer???????????