ipt_recent

/etc/rc.sysinit
modprobe ipt_recent
 
 
/etc/modprobe.conf
options ipt_recent ip_pkt_list_tot=100
 
modprobe ipt_recent
 
iptables -A RH-Firewall-1-INPUT -p tcp –dport 80 -m recent –name BAD_HTTP_ACCESS –update –seconds 60 –hitcount 30 -j REJECT
iptables -A RH-Firewall-1-INPUT -p tcp –dport 80 -m recent –name BAD_HTTP_ACCESS –set -j ACCEPT
service iptables restart