Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 May 2005 15:19:31 +0300
From:      "dnr" <dnr@freemail.lt>
To:        <freebsd-net@freebsd.org>
Subject:   tcp session limit with ipfw
Message-ID:  <032b01c562b6$56153ed0$9f90a8c0@DONATAS>

next in thread | raw e-mail | index | archive | help
is there any possibility to limit tcp session count let's say from 3 to =
2 for any port separately?

for examples:
establishing 3 active ftp sessions from 10.10.10.2 to 10.10.10.1 and =
doing transfer via 1 session we have:

10.10.10.1.ftp - 10.10.10.2.57185 - ESTABLISHED
10.10.10.1.ftp - 10.10.10.2.55069 - ESTABLISHED
10.10.10.1.ftp - 10.10.10.2.60589 - ESTABLISHED
10.10.10.1.ftp - 10.10.10.2.59201 - TIME_WAIT
10.10.10.1.ftp - 10.10.10.2.57144 - TIME_WAIT
10.10.10.1.ftp - 10.10.10.2.61237 - ESTABLISHED   ---> DATA transfer

so, how limit using IPFW any other atempts to establish ftp session =
number 4,5 etc... so we could use maximum 3sessions/1 IPaddrs?

thnx






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?032b01c562b6$56153ed0$9f90a8c0>