Kriterien: Begrenzung I


--limit RATE
    /second /minute /hour /date
--limit-burst NUMBER

Schutz vor Syn-flood:
iptables -A FORWARD -p tcp --syn -m limit 1/s -j ACCEPT

Ping of death: 
iptables -A FORWARD -p icmp --icmp-type echo-request
    -m limit 1/s -j ACCEPT