Unknown arg `–hashlimit-upto'

Mely N asked:

I’m trying to prevent loic attackes by using this command

iptables -A INPUT -p tcp --dport 80 -m hashlimit --hashlimit-upto 50/min 
--hashlimit-burst 500 --hashlimit-mode srcip --hashlimit-name http -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j DROP

reference: How to prevent a LOIC (DDOS) attack?

I always got this error message:

iptables v1.3.5: Unknown arg `--hashlimit-upto'

What’s causing it and how can I fix it?

My answer:


You’re using an ancient version of iptables which dates back to January 2006, and probably on a very old Linux distribution.

The problem is that the feature you were trying to use was added to iptables in 2008.

The solution is to update to a more modern Linux distribution.


View the full question and answer on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.