X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=trunk%2Fextensions%2Flibxt_limit.man;fp=trunk%2Fextensions%2Flibxt_limit.man;h=0419c50a2592bd7ab8387c7622cd9d92dbd2c7c6;hb=65d1e3fdac47d3d758f6f018457c28d6f3f6306a;hp=0000000000000000000000000000000000000000;hpb=98c90cbcc6f660e13f9e7878bbb80dfc9d03ceae;p=iptables.git

diff --git a/trunk/extensions/libxt_limit.man b/trunk/extensions/libxt_limit.man
new file mode 100644
index 0000000..0419c50
--- /dev/null
+++ b/trunk/extensions/libxt_limit.man
@@ -0,0 +1,15 @@
+This module matches at a limited rate using a token bucket filter.
+A rule using this extension will match until this limit is reached
+(unless the `!' flag is used).  It can be used in combination with the
+.B LOG
+target to give limited logging, for example.
+.TP
+[\fB!\fP] \fB--limit\fP \fIrate\fP[\fB/second\fP|\fB/minute\fP|\fB/hour\fP|\fB/day\fP]
+Maximum average matching rate: specified as a number, with an optional
+`/second', `/minute', `/hour', or `/day' suffix; the default is
+3/hour.
+.TP
+.BI "--limit-burst " "number"
+Maximum initial number of packets to match: this number gets
+recharged by one every time the limit specified above is not reached,
+up to this number; the default is 5.