Wed Feb 22, 2012 5:26 am
I use this rule to take the customers that have gone over 200 connections and add them to an address list, after they hit the address list i have anther rule that kicks in and lowers there connections down to like 20. This rule only applies to my private address, i do not run this rule against my customers with public ips.
add action=add-src-to-address-list address-list=connection \
address-list-timeout=30m chain=forward comment=\
"Connection tracking for NATED IPS ONLY" connection-limit=200,32 disabled=\
no protocol=tcp src-address-list=local-addr