Date: Mon, 17 Jun 2002 13:09:52 -0400 From: "Joe & Fhe Barbish" <barbish@a1poweruser.com> To: "Paulius Bulotas" <paulius@kaktusas.org> Cc: "FBSDQ" <questions@FreeBSD.ORG> Subject: RE: limit number of connections per client ip address Message-ID: <MIEPLLIBMLEEABPDBIEGCEPJCCAA.barbish@a1poweruser.com> In-Reply-To: <20020617100726.GB54160@kaktusas.org>
next in thread | previous in thread | raw e-mail | index | archive | help
The ipfw limit {src-addr | src-port | dst-addr | dst-port} N is not
intended for limiting the number of connections per client ip address.
It's intended to limit the number of identical packets per ipfw rule
to fort dos flood attacks.
-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Paulius Bulotas
Sent: Monday, June 17, 2002 6:07 AM
To: freebsd questions
Subject: Re: limit number of connections per client ip address
On 02 06 14, Nielsen wrote:
> As far as I know this is not possible in freebsd with either of the
> firewalls supplied. Dummynet is for limiting traffic rate, simulating
From ipfw man page:
limit {src-addr | src-port | dst-addr | dst-port} N
The firewall will only allow N connections with the same
set of parameters as specified in the rule. One or more
of source and destination addresses and ports can be
specified.
Regards,
Paulius
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MIEPLLIBMLEEABPDBIEGCEPJCCAA.barbish>