block first icmp pakets then let them go

sqn · 03-30-2006, 01:17 AM

Hi all,
I am trying to build a set of rules (with iptables) to create a partial icmp blocking. I want to block the first 4 icmp packets and after that 4 to let them go.
Is it possible to do that?

sqn · 03-30-2006, 06:12 AM

I tryed with -m limit, but is not quite a solution...

iptables -A INPUT -p icmp -m limit --limit 6/min -j DROP
iptables -A INPUT -p icmp -m limit --limit 2/min -j ACCEPT
iptables -A INPUT -p icmp -j DROP

but it is anoing to wait a minnute

win32sux · 03-30-2006, 11:05 AM

yeah, i think the "limit" match would suck in this case...

sounds like you might be better-off using the "nth" match:

http://netfilter.org/projects/patch-...l#pom-base-nth

just a thought...

sqn · 03-31-2006, 01:18 AM

looks like more fore me

i'll give it a try ... thx win32sux