iptables -A INPUT -p TCP –dport 80 –syn -m recent –name http –update –seconds 60 –hitcount 5 -j REJECT
iptables -A INPUT -p TCP –dport 80 –syn -m recent –name http –set

it will prevent someone making more than 5 connections in 60 seconds on port 80