Re: patching iptables for connlimit

Andrew Beverley
Wed, 26 Jul 2006 15:56:45 -0000

> the patch described at
>
>
http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.5
>
> works for the FORWARD chain as well ?

Yes I''ve just tried it and it works fine.

If you want to use connlimit and you''re using a recent kernel
you''ll need to take
a look at the netfilter users mailing list for details on how to use connlimit
with it. Take a look at:

http://lists.netfilter.org/pipermail/netfilter/2006-July/066227.html

and also the thread index for the other messages. Unfortunately the thread is
split up into several places in the index.

Andy Beverley