i need to limit number of simultaneous connections to httpd:

on server:
iptables -A INPUT -p tcp -m connlimit --connlimit-above 5 --dport 80 -j DROP
(there is onle one rule in firewall )

on client i run slowloris..

on the server under attack
netstat -nta | grep :80 | grep ESTABLISHED | wc -l
180

as i understand 'iptables -L -n -v' - my rule never hits,

existing behavior:
on server under attack a lot of simultaneous connection from single ip.

expected behavior:
server should have only 5 connections

i miss something ?

ps:

debian linux 2.6.30-2, iptables 1.4.4-2 
slowloris - http://ha.ckers.org/slowloris/

Doesn't work for me either. Jan?

Created an attachment (id=304) [details]
Fix

Affects 2.6.28--current. Please forward to 2.6.31-stable.

Here's a patch.

*** Bug 618 has been marked as a duplicate of this bug. ***

Kernel 2.6.31.5
After patch - get worked.
Thank you.