In article <[EMAIL PROTECTED]> you wrote: >> >server# iptables -A INPUT -p tcp --dport 80 -m connlimit --connlimit-above >> >3 -j REJECT --reject-with tcp-reset
Have you tried: iptables -m connlimit -h does it show the connlimit options? BTW: my iptables manpage knows about -m connrate --connrate <from>:<to>, but it is clearly not available on my system. Perhaps it is easiest if you strace the command. Also try to skip single parameters (like --reject-with tcp-reset) Greetings Bernd -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]