howto limit max concurent connections ??

fritz001 · 08-08-2005, 04:51 AM

well i try to find if there is any possibilities to limit the max conections a user can establish...

ex: ip 192.154.1.111 not to be allowed to establish more then 50 conections,... on TCP/UDP protocol...

Matir · 08-08-2005, 10:11 PM

Connections of what type? SSH? HTTP? FTP? All of the above combined?

fritz001 · 08-09-2005, 03:44 AM

let[s say a user(host 192.168.154.224) is using dc++ or emule....

i want to limit the max connections to 50 for that host...

...or he is using a download accelerator and setup the program to establish 60 connections
but to be limited to only 50 conn....

Matir · 08-09-2005, 12:10 PM

Most P2P file sharing programs have their own settings for limiting concurrent connections.

lunarnexus · 08-11-2005, 11:26 AM

I'd like to know also. I'm working on a firewall project and that would be a usefull feature.

lunarnexus · 08-11-2005, 11:36 AM

Well it seems I always find my own answers.

/proc/sys/net/ipv4/ip_conntrack_max

Matir · 08-11-2005, 11:38 AM

ip_conntrack_max is the maximum number of connections that can be tracked by ip_conntrack (obviously). This limits the TOTAL number of connections an IP Forwarding box can handle. It is not per-client, and only applies to firewalls.