Hi,

I currently use CSF to make a redirect from a 10Gbps server to a 1gbps server to protect them from ddos but the problem is that if i redirect all it will redirect also syn_sent and all others packets/connections.. ando so is like the frontend attack the backend.

What i'm looking is to write a iptables rules to forward traffic from one IP of one server of a specific port to another ip of another server to specific port but filter only good traffic, limit 5 connections/s for each ip so the server of 10gbps will accept all traffic and will forward only 5 connections/s by each IP to the backend with 1gbps.

This took very less time for an expert so i think is not hard to do.

Thanks