Re: Introducing shorewall-nft

Dave Kempe <[email protected]> Mon, 27 Jul 2026 08:41:47 +1000
Newsgroups gmane.comp.security.shorewall
Message-ID <CAEc_UVRxDXEKO-0Bm1gqwB2Hoyayx-W4sWO417mEF_ZAn8MWBw@mail.gmail.com>
--===============3902665532068670928==
Content-Type: multipart/alternative; boundary="00000000000061e26106578b5003"

--00000000000061e26106578b5003
Content-Type: text/plain; charset="UTF-8"

On Mon, 27 Jul 2026 at 06:36, David Watkins <[email protected]> wrote:

> I'm tempted to give it a try.
>
> Is rate limiting on incoming connections supported?  eg. a rule like
>
> REDIRECT        net             <port>              tcp
>  <port>            - - 1/min:2
>
>
This was missing and is implemented in the latest version, scheduled for
release shortly.

Dave

--00000000000061e26106578b5003
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote g=
mail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, 27 Jul =
2026 at 06:36, David Watkins &lt;<a href=3D"mailto:[email protected]">w=
[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quo=
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex"><div dir=3D"ltr">I&#39;m tempted to give it a try.<div>=
<br></div><div>Is rate limiting on incoming connections supported?=C2=A0 eg=
. a rule like</div><div><br></div><div>REDIRECT =C2=A0 =C2=A0 =C2=A0 =C2=A0=
net=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0&lt;port&gt;=C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 tcp=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0&lt;port&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 - - =
1/min:2</div></div><br></blockquote><div><br></div><div>This was missing an=
d is implemented in the latest version, scheduled for release shortly.</div=
><div><br></div><div>Dave=C2=A0</div></div></div>

--00000000000061e26106578b5003--


--===============3902665532068670928==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============3902665532068670928==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline