```json
{
    "title": "Today’s iptables FUN!",
    "url": "https://performancezen.com/2005/07/06/todays-iptables-fun/",
    "datePublished": "2005-07-06",
    "dateModified": "2005-07-06",
    "language": "en-US",
    "description": "Ok, after this morning's DDoS, I started rummaging around for ways to limit the amount of hurt that my server would handle. And I found the limit function in iptables.…",
    "author": "spierzchala",
    "publisher": "Performance Zen"
}
```

# Today’s iptables FUN!

Ok, after this morning's DDoS, I started rummaging around for ways to limit the amount of hurt that my server would handle. And I found the

*limit*

function in iptables.

> /sbin/iptables -A INPUT -p tcp -d 10.125.1.250 \
>  --dport 80 -m limit --limit 6/m --limit-burst 10 -i eth0 -j ACCEPT
> /sbin/iptables -A OUTPUT -p tcp -s 10.125.1.250 \
>  --sport 80 -m limit --limit 6/m --limit-burst 10 -o eth0 -j ACCEPT

This should help get some of the requests under control.
Also, I discovered this interesting application called

[tc](http://lartc.org/)

. Going to see how I can integrate this with some iptables rules.

Technorati:

[iptables](http://technorati.com/tag/iptables)