[lug] IP Tables

[Nate Duehr]

karl horlen wrote:
> if i did open up icmp, i imagine i might be able to
> specify a delay time for the reply in the iptables
> rule?  if i could do that, i could at least limit the
> bandwidth ping attacks consume on my pipe.  I know it
> might not make that much of a difference.  But then
> again it could versus if no delay was added.  Not even
> sure i can do this but it seems feasible.

Like:

/sbin/iptables -A INPUT -i eth0 -p icmp -m limit --limit 2/s -j ACCEPT

...perhaps?  :-)

It might help to Google for "iptables examples" and start looking 
through how others are approaching the same problems.

Nate