I want to limit the number of connections from the same ip to my server (RedHat 8).
I've added the connlimit (from patch-o-matic), and I've recompiled the kernel and installed the modules. It seems that the module ipt_connlimit is installed in the system.
But when I try to add a new rule to iptables using connlimit option it returns the following error:

iptables v1.2.6a: Couldn't load match `connlimit':/lib/iptables/libipt_connlimit.so: cannot open shared object file: No such file or directory

Does anybody know what could be the problem??

Thanks a lot!!!

you need to recompile the iptables userland package, as it only compiles support for what it reads in the kernel config it finds.

so, a good way to do it is to patch-o-matic your kernel, do the make mrproper && make config && make dep on the kernel, then compile the iptables source. if you still have your patched kernel source around, just skip to iptables and point it to your kernel sources during make.

oh, and redhat uses a prefix of / (which is probably the best place for it), so be sure to set those variables as explained in the INSTALL file.