Red Hat Enterprise Linux 5 Administration Unleashed

Using IPTables Match Extensions 485--hashlimit Specify the rate as a number followed by /, where is second,minute, hour, or day.--hashlimit-burst Maximum burst value, where the burst value is increased by 1 each time thedefined rate limit is reached. Default value is 5.--hashlimit-mode Replace with destination IP address or IP address and port combinationin the format -.--hashlimit-name Name for the /proc/net/ipt_hashlimit/ file.--hashlimit-htable-size Number of buckets of the hash table.--hashlimit-htable-max Maximum number of entries in the hash.--hashlimit-htable-expire Hash entries expire after a defined number of milliseconds.--hashlimit-htable-gcinterval Time interval between garbage collection in milliseconds.24helperMatch based on conntrack-helper.--helper Replace with name of service if it is using the default port or the nameof the service followed by a hyphen and port number such as http-4343.icmpMatch based on ICMP type. Must be used in conjunction with --protocol icmp.--icmp-type [!] can be a number or the ICMP type name.iprangeMatch according to IP (version 4) range.[!]--src-range -Match according to source IP within given range.[!]--dst-range -Match according to destination IP within given range.