Is it possible to use iptable tables to rate limit an ipset ?
I know you can use ipset to create a block list named blacklist
i.e.
ipset create blacklist hash:ip
iptables -I INPUT -m set --match-set blacklist src -j DROP
ipset add blacklist 1.2.3.4
ipset add blacklist 1.2.3.5
But how can you rate limit the ipset called blacklist ? Something like ?
iptables -I INPUT -m set --match-set blacklist src -p TCP --dport 80 -m hashlimit --hashlimit 50/sec --hashlimit-burst 10 --hashlimit-name blacklisthash -j DROP
is –hashlimit-mode srcip
even needed ?
thanks