iptables-extensions: list of extensions in the standard...
ip6tables -p tcp --syn --dport 49152:65535 -d 2001:db8::1 -m connlimit --connlimit-above 100 -j REJECT connmark This module matches the netfilter mark field associated with a connection (which can be set using the CONNMARK target below). ...