If you want to go the iptables route (have fun...) check out the --limit option.

Here's an example: http://www.webservertalk.com/message1796841.html