Hello,

First i want to sorry for my English.

Ok, here i'm looking for help, so i have java application running on 489 port and some peoples flood them with packets. It's not diffucult to find them, but they change IP and flood again, so i need automatic system to detect it and ban...


I thinking about this:

If Incoming internet traffic from one IP is more then 10KBps, add this IP to iptables ban...

Maybe someone have solution for this?

Thanks for help!