How to restrict NAT traffic to specific IPs in Linux Gentoo?

Question

linux

Good day, gentlemen. Tell me how to deal with such a problem: Linux Gentoo 2.6.37-hardened-r2 which NATs certain IP addresses in a subnet. How to limit the traffic to these IPs, otherwise some of them *** will clog up the entire channel.

Answer 1

You can use tc for this, although I can't be sure that in Ghent this would be the most convenient way.

Answer 2

Those. you need shaping. To do this, in Linux, tc is used. You can write tc rules by hand, or you can use, for example, the htbinit script . It generates tc rules based on more or less readable configs.

Answer 3

To begin with, limit = prohibit or allow, but limit?
If the first - then iptables -A FORWARD -s address -j DROP
If the second - then tc and figure it out, it's really more difficult. There are no ready-made initscripts in jent, it is quite possible to write your own.

Answer 4

I usually just drop every fifth packet to such connections and say that the network is overloaded, people always come to their senses and do not overload. Social engineering what can I say.