Need example of ip rate limiting

Need example of ip rate limiting

[Robert La Ferla]

I would like to limit the number of HTTP (port 80) requests that any one 
IP address can make agaist an Apache web server per second or per 
minute.  I think iptables has such functionality.  Can someone give me 
an example of how to do it?  Is there a better way to do it or is 
iptables the best route?

Thanks!

Re: Need example of ip rate limiting

[Robert La Ferla]

Anyone have examples of iplimit to limit http DoS attacks?

RE: Need example of ip rate limiting

[Daniel Chemko]

How about
iptables -A INPUT --destination <blah> -p tcp --dport 80 -m state NEW -m
limit --limit 3/s -j ACCEPT
iptables -A INPUT --destination <blah> -p tcp --dport 80 -m state NEW -j
DROP

Adjust the 3/s number higher or lower depending on how much traffic your
site gets per second on average and then put it a little bit higher.

-----Original Message-----
From: Robert La Ferla [mailto:robertlaferla@comcast.net] 
Sent: Monday, July 28, 2003 10:29 AM
To: netfilter@lists.netfilter.org
Subject: Re: Need example of ip rate limiting

Anyone have examples of iplimit to limit http DoS attacks?