Date: Mon, 10 Jan 2005 07:58:58 -0700 From: Ed Stover <estover@nativenerds.com> To: freebsd-security@freebsd.org Cc: Carl Mark <carlmarkbsd@hotmail.co.uk> Subject: Re: connection limit with ipfw Message-ID: <1105369138.5197.9.camel@red.nativenerds.com> In-Reply-To: <BAY21-F405B9FA87CFBE2CE0EC4B5EE970@phx.gbl> References: <BAY21-F405B9FA87CFBE2CE0EC4B5EE970@phx.gbl>
next in thread | previous in thread | raw e-mail | index | archive | help
Try posting this to freebsd-ipfw@freebsd.org that might be a little more responsive toward the question. On Mon, 2005-01-10 at 12:32 +0000, Carl Mark wrote: > Hello folks, > > I'm trying to set up a ruleset that limits every user to X tcp > connections, since I have 300 active users on each server. I've been trying > to work it out with the ipfw limit but I really don't know how effective it > is. > > For example: > > ipfw -q add 15 allow tcp from me to any 80 limit dst-port X keep-state out > setup > > > Will this limit the whole machine to X connections that match the rule? I > wanted to build somehting that would limit every user to X conns without > having one rule for each user using the "uid" directive. > > Thanks for your precious help. > Regards, > Carl > > _________________________________________________________________ > It's fast, it's easy and it's free. Get MSN Messenger today! > http://www.msn.co.uk/messenger > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1105369138.5197.9.camel>