Steven Jan Springl wrote:
> Tom
> 
> Rule:
> 
> DROP  lan  $FW  tcp  25  -  -  1
> 
> when compiled with shorewall-shell, the following message is produced:
> 
> ERROR: Rate Limiting not available with DROP
> 
> when compiled with shorewall-perl, the following iptables rule is generated:
> 
> -A lan2fw -p 6 --dport 25 -m limit --limit 1 -j DROP

Revision 6215 disallows rate limiting with both DROP and REJECT (in both
compilers).
> 
> 
> Just out of interest, what would happen to a connection that failed the above 
> rate limit check?
> 

It is passed on to the next rule.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to