From owner-freebsd-questions  Thu Jan 11 15:55:20 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from gekko.i-clue.de (server.ms-agentur.de [62.153.134.194])
	by hub.freebsd.org (Postfix) with ESMTP id C563A37B69C
	for <freebsd-questions@FreeBSD.ORG>; Thu, 11 Jan 2001 15:55:01 -0800 (PST)
Received: from i-clue.de (automatix.i-clue.de [192.168.0.112])
	by gekko.i-clue.de (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id CAA31097;
	Fri, 12 Jan 2001 02:01:51 +0100
Message-ID: <3A5E4812.B7A63C7E@i-clue.de>
Date: Fri, 12 Jan 2001 00:56:02 +0100
From: Christoph Sold <christoph.sold@server.i-clue.de>
Reply-To: christoph.sold@server.i-clue.de
Organization: i-clue interactive
X-Mailer: Mozilla 4.75 [de] (WinNT; U)
X-Accept-Language: de
MIME-Version: 1.0
To: Jim Freeze <jim@freeze.org>
Cc: Christoph Sold <christoph.sold@server.ms-agentur.de>,
	"Mitchell, Jason" <jmitc2@chmc.org>,
	"'freebsd-questions@freebsd.org'" <freebsd-questions@FreeBSD.ORG>
Subject: Re: Limiting number of downloads per user in Apache??
References: <Pine.BSF.4.21.0101111843050.51405-100000@www.bellnetworks.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG



Jim Freeze schrieb:
> 
> With php you can track a visitors ip with $REMOTE_ADDR.
> This should identify the user, even with multiple windows open.

This will break all users surfing through an http application proxy:
even if there are millions of users behind it, it will show only one
connection to the outside. Don't know if AOL or Compuserve still use
that scheme, T-Online (German Telekom) still does.

Just my EUR .02
-Christoph Sold

> On Fri, 12 Jan 2001, Christoph Sold wrote:
> >
> > "Mitchell, Jason" schrieb:
> > >
> > > Anyone have any luck with limiting the number of connections or downloads
> > > allowed per user/visitor on a web site served by Apache?  I'm running 1.3.12
> > > and getting these people that open up 10-20 downloads all at once, pretty
> > > much consuming my bandwidth.  I'd like to limit it down to 2-3 per user.
> > > The MaxClients directive won't work, of course, as that will lock everyone
> > > out once the max is hit.
> >
> > There is no clean way to do such a thing. Http is a connectionless
> > protocol, thus you cannot count how much connections are linked to a
> > particular client. Also keep in mind the gazillion of surfers connected
> > through single gateways (AOL, Compuserve,...).
> >
> > You may try any form of session tracking, but this will limit only the
> > dumb user -- some more intelligent people will launch another instance
> > of their browser, or even use another window to get another connection.
> >
> > Just my .02 EUR
> > -Christoph Sold
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
> 
> ====================================================
> Jim Freeze
> jim@freeze.org
> ---------------------------------------------------
> ** http://www.freeze.org **
> ====================================================


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message