2010/02/09

ip6tables to do bandwidth throttling

Now that I have an autoreply email facility on v6 by way of Postfix, I need to make sure this facility is not abused. Unlike Sendmail, parameters for bandwidth throttling are not provided in Postfix. Hopefully, I can make use of ip6tables to limit the number of concurrent connections from an IPv6 address to 5. The following has been tested successfully:

#ip6tables -A INPUT -p tcp --syn --dport 25 -m connlimit --connlimit-above 5 -j REJECT

Once again, I witness the power of iptables and ip6tables.

No comments: