Explicit Matches

• -m limit –limit

  • Matches only up to the limit specified
  • Specification may be /second, /minute, /hour or /day
  • Works like a threshold if negated, i.e., it starts matching after the limit is reached
  • iptables -A INPUT -p 1 –icmp-type 8 -m ! limit –limit 10/second -j LOG

Notes: