[squid-users] iptables to limit connections

Hi!

Our problem: Every so often a client in the internal net runs amok and
hammers the proxy with about 50 (!) connections per second.

Squid does handle this, but it's really futile -- we'd like to stop
the client before squid gets to see the packets.

So I thought iptables --limit could do the trick.
Before I reinvent the whell, I'd like to ask if someone already has
such a "connection rate limiter per IP" in place (and how it looks).

-- 
Ralf Hildebrandt (Im Auftrag des Referat V a)   Ralf.Hildebrandt@charite.de
Charite Campus Mitte                            Tel.  +49 (0)30-450 570-155
Referat V a - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
AIM: ralfpostfix