[Slice]

This could be done with iptables, btw.

Something like this:

Code:

-N SAMP_QUERY
-A SAMP_QUERY -m hashlimit --hashlimit-name samp-query --hashlimit-above 3/s --hashlimit-burst 6 --hashlimit-mode srcip,dstport -j DROP
-A SAMP_QUERY -j ACCEPT

-A INPUT -p udp -m length --length 43 --dport 7777 -m string --algo kmp --hex-string "SAMP|2E1322F2B822" -j SAMP_QUERY

The hex string is IP+port (see this).