Score:0

Iptables: limit mdns packet per second per ip

us flag

I have a network with a lot of MDNS (UDP 5353) traffic on it.

To avoid overloading my server, I limit globally the MDNS packets accepted by iptables with this rules:

iptables -A INPUT -i eth2 -p udp --dport 5353 -m limit --limit 100/second -j ACCEPT

Now I would like to set this limite per source IP, in oder to accept 5 MDNS packet per second for a single source ip.

However, I'm not sure on how to do that... With connlimit maybe? But because I'm working on UDP packet (without connection), I don't think its the answer here...

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.