Iulian wrote:

> 
>Scuze am facut paste aiurea....
>  iptables -A PREROUTING -t nat  -p tcp --syn --dport 80 -m connlimit
>--connlimit-above 16 --connlimit-mask 24 -j REJECT
>iptables: No chain/target/match by that name
>
>  
>
Ca regula generala: nu pui filtre in tabela nat - daca vrei in chain 
PREROUTING mai bine le pui in mangle. Iar daca le pui in PREROUTING, 
--syn e cam in plus.

Presupunere: cred ca nu ii convine ca -t nat e dupa -A PREROUTING. 
Tabela default e filter, care nu are acest chain.
Ia-o step-by-step: intii pui o regula doar cu -m connlimit, apoi adaugi 
-p tcp, ...

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui