From owner-freebsd-ipfw@FreeBSD.ORG Fri Aug 27 12:59:02 2004 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4A23916A4CE for ; Fri, 27 Aug 2004 12:59:02 +0000 (GMT) Received: from mail-charenton.netaktiv.com (netaktiv.net1.nerim.net [62.212.103.139]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7EDF143D5F for ; Fri, 27 Aug 2004 12:59:01 +0000 (GMT) (envelope-from pierre-gilles@staff.netaktiv.com) Received: from localhost (localhost [127.0.0.1]) by mail-charenton.netaktiv.com (Postfix) with ESMTP id 0740C42AC8 for ; Fri, 27 Aug 2004 14:59:00 +0200 (CEST) Received: from mail-charenton.netaktiv.com ([127.0.0.1]) by localhost (aragon [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23563-10 for ; Fri, 27 Aug 2004 14:58:59 +0200 (CEST) Received: by mail-charenton.netaktiv.com (Postfix, from userid 1007) id CE08642A84; Fri, 27 Aug 2004 14:58:59 +0200 (CEST) Date: Fri, 27 Aug 2004 14:58:59 +0200 From: Pierre-Gilles Mialon To: freebsd-ipfw@freebsd.org Message-ID: <20040827125859.GI20492@staff.netaktiv.com> References: <20040827102302.GE20492@staff.netaktiv.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20040827102302.GE20492@staff.netaktiv.com> User-Agent: Mutt/1.5.6i X-Virus-Scanned: by amavisd-new-20030616-p5 (Debian) at netaktiv.com Subject: Re: Limit the number of connection per host ? X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2004 12:59:02 -0000 Le Fri, Aug 27, 2004 at 12:23:02PM +0200, Pierre-Gilles Mialon a écrit: > Is it possible to limit the number of connection > per host, on FreeBSD routeur using natd to share a connection. > > I want to limit the use of p2p programs so I want to limit at > 120 the number of tcp connections opened per host, is it possible using > Ipfw ? Sorry I find it in "man ipfw" limit {src-addr | src-port | dst-addr | dst-port} N The firewall will only allow N connections with the same set of parameters as specified in the rule. One or more of source and destination addresses and ports can be specified. Too easy to believe ! Thanks for your work, and for the quality of the documentation ! -- Pierre-Gilles Mialon mialon@netaktiv.com