1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m connlimit --connlimit-above 2 2*a71a9546SAutomerger Merge Workernft 'add set ip filter connlimit0 { type ipv4_addr; flags dynamic; }' 3*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT add @connlimit0 { ip saddr ct count over 2 } counter' 4*a71a9546SAutomerger Merge Worker 5*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m connlimit --connlimit-upto 2 6*a71a9546SAutomerger Merge Workernft 'add set ip filter connlimit0 { type ipv4_addr; flags dynamic; }' 7*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT add @connlimit0 { ip saddr ct count 2 } counter' 8*a71a9546SAutomerger Merge Worker 9*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m connlimit --connlimit-upto 2 --connlimit-mask 24 10*a71a9546SAutomerger Merge Workernft 'add set ip filter connlimit0 { type ipv4_addr; flags dynamic; }' 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT add @connlimit0 { ip saddr and 255.255.255.0 ct count 2 } counter' 12*a71a9546SAutomerger Merge Worker 13*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -m connlimit --connlimit-upto 2 --connlimit-daddr 14*a71a9546SAutomerger Merge Workernft 'add set ip filter connlimit0 { type ipv4_addr; flags dynamic; }' 15*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT add @connlimit0 { ip daddr ct count 2 } counter' 16