Asi by som to skusil takto :add chain=neplecha p2p=all-p2p connection-state=established \
dst-limit=1/5s,0,dst-address/1h action=accept comment="povoli jedno spojenie za 5sek established" disabled=no
add chain=neplecha p2p=all-p2p connection-state=established \
action=drop comment="zakaze vsetko dalsie" disabled=no
Malo by to makat dobre. Este mozno pridat volbu rozhrania, na ktore to bude platit...