be careful use the "ip firewall connections"with

lgl007078 · Sun Oct 03, 2004 4:29 pm

when more than 150 clients pc online in your lan nerwork ,be careful use the "ip firewall connections"with winbox !!!

because while you do it ,the routeros will too busy to death !!! you must reboot it . i try again!! the same happened!!

now i suggest you be careful !!!

gianluca · Sun Oct 03, 2004 8:16 pm

I receive a time out also via telnet
why don't limit teh connection amount?

HarvSki · Mon Oct 04, 2004 3:43 pm

would you mind posting an example of what you mean? and the settings

gianluca · Mon Oct 04, 2004 11:28 pm

well on the forward chain put a drop on the p2p connetcion an connection limit at 150 on tcp connections

don't you have problems with p2p customers ?

HarvSki · Fri Oct 08, 2004 1:10 am

yes there are some that do this!

is this what you mean in those rules? I've used smaller numbers though

[admin@MtBures] ip firewall rule forward> print
Flags: X - disabled, I - invalid, D - dynamic
0 flow=p2p_down limit-count=20 action=passthrough

1 flow=p2p_up limit-count=10 action=passthrough

marked the flow with Mangle as I use this for bandwidth shaping.

gianluca · Wed Nov 03, 2004 1:45 pm

well

you should put also protocol=tcp and limit-connection=150 per each user using p2p

we are maybe in teh same case, we have 150 users over the mikortik with just 1 public IP address

is your network using p2p ? doeas it work fine?