From owner-freebsd-questions@FreeBSD.ORG  Fri Apr 29 19:43:13 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2CC1416A4CE
	for <questions@freebsd.org>; Fri, 29 Apr 2005 19:43:13 +0000 (GMT)
Received: from prime.gushi.org (prime.gushi.org [65.125.228.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B289543D2D
	for <questions@freebsd.org>; Fri, 29 Apr 2005 19:43:12 +0000 (GMT)
	(envelope-from danm@prime.gushi.org)
Received: from prime.gushi.org (danm@localhost.com [127.0.0.1] (may be
	forged))
	by prime.gushi.org (8.13.1/8.13.1) with ESMTP id j3TJotCZ068959
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <questions@freebsd.org>; Fri, 29 Apr 2005 15:50:55 -0400 (EDT)
Received: from localhost (danm@localhost)
	by prime.gushi.org (8.13.1/8.13.1/Submit) with ESMTP id j3TJotYC068952
	for <questions@freebsd.org>; Fri, 29 Apr 2005 15:50:55 -0400 (EDT)
Date: Fri, 29 Apr 2005 15:50:54 -0400 (EDT)
From: "Dan Mahoney, System Admin" <danm@prime.gushi.org>
To: questions@freebsd.org
Message-ID: <20050429154834.Q68031@prime.gushi.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Subject: Generic Session-Limiting firewall rule.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Apr 2005 19:43:13 -0000

Is there any way to do session limiting in ipfw?  I can limit connections 
between any specific src and dst easy...what I'd like to do is just 
(either by some standard I don't get, or dynamic rules) limit between ANY 
given hosts

Does anyone know a way of doing this?

-Dan Mahoney

--

"It doesn't matter where I live, because I live in dataspace.  That's my
hometown."

-Steve Roberts, Builder of BEHEMOTH

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------