2008/7/2 yuan shijiang <yshijiang (at) gmail (dot) com [email concealed]>:
> iptables -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24 --sport 445 -m
> hashlimit --hashlimit 20/sec --hashlimit-mode dstip --hashlimit-name
> samba -j ACCEPT
> iptables -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24 --sport 445 -j REJECT

If you REJECT a packet isn't that going to close the connection?

Last time I needed to do linux traffic shaping I used the tc stuff
described here: http://lartc.org/howto/

The HOWTO is pretty scary, but there's an example script here:
http://lartc.org/howto/lartc.cookbook.ultimate-tc.html

cheers,
Jamie
--
Jamie Riden / jamesr (at) europe (dot) com [email concealed] / jamie (at) honeynet.org (dot) uk [email concealed]
UK Honeynet Project: http://www.ukhoneynet.org/

[ reply ]