"Whitelist" for IPtables?

Question

iptables

Good day
Iptables has a connlimit rule set for port 80
How can I make sure that connlimit does not work for given addresses?

Answer 1

iptables -I INPUT -s IP_ADDRES -j ACCEPT
- will insert the rule at the very beginning of the INPUT chain.

iptables --line-numbers -nL
iptables -I INPUT 3 -s IP_ADDRES -j ACCEPT

- view the list of rules with numbers and insert the rule on the 3rd line in the INPUT chain. Find out where you have the rule with the connlimit criterion and add what you need before it.

Answer 2

write a rule for these IPs and put it above the connlimit rule