diff options
| author | Bart De Schuymer <bdschuym@pandora.be> | 2004-10-23 11:20:34 +0000 |
|---|---|---|
| committer | Bart De Schuymer <bdschuym@pandora.be> | 2004-10-23 11:20:34 +0000 |
| commit | 1b4ccfa221a3bd538109eceafed1e9c8c0951156 (patch) | |
| tree | bfa0bb3054a650009887de7816ab7f20346f4e5f /ebtables.8 | |
| parent | aef08947f59cab26a6ff85578730af7c96bd4fc1 (diff) | |
| download | ebtables-1b4ccfa221a3bd538109eceafed1e9c8c0951156.tar.gz ebtables-1b4ccfa221a3bd538109eceafed1e9c8c0951156.tar.bz2 ebtables-1b4ccfa221a3bd538109eceafed1e9c8c0951156.zip | |
add limit entry
Diffstat (limited to 'ebtables.8')
| -rw-r--r-- | ebtables.8 | 18 |
1 files changed, 18 insertions, 0 deletions
@@ -561,6 +561,24 @@ The destination port or port range for ip protocols 6 (TCP) and 17 (UDP). The flag .B --ip-dport is an alias for this option. +.SS limit +This module matches at a limited rate using a token bucket filter. +A rule using this extension will match until this limit is reached. +It can be used with the +.B --log +watcher +to give limited logging, for example. Its use is the same as the limit +match of iptables. +.TP +.BR "--limit " "[\fIvalue\fP]" +Maximum average matching rate: specified as a number, with an optional +`/second', `/minute', `/hour', or `/day' suffix; the default is 3/hour. +.TP +.BR "--limit-burst " "[\fInumber\fP]" +Maximum initial number of packets to match: this number gets recharged by +one every time the limit specified above is not reached, up to this +number; the default is 5. +.SS pkttype .SS mark_m .TP .BR "--mark " "[!] [\fIvalue\fP][/\fImask\fP]" |