Community discussions

MikroTik App
 
amode
newbie
Topic Author
Posts: 31
Joined: Fri Feb 23, 2007 1:28 pm

Matching number of tcp connections per time...

Thu Mar 15, 2007 9:02 pm

Hi,

has someone some help how to make a filter rule which maches something like

"number of tcp connections per second"?

Is this possible at all?

Thanks for any feedback here.

Achim
 
amode
newbie
Topic Author
Posts: 31
Joined: Fri Feb 23, 2007 1:28 pm

Fri Mar 16, 2007 12:22 am

okay, was able to solve this by myself by just searching the forum.

Sorry for the spam..

Achim
 
weller
just joined
Posts: 12
Joined: Fri Feb 09, 2007 7:58 am
Location: Iraq

Sun Mar 18, 2007 7:14 pm

hi there,
do u want to limit number of tcp conn per user or per interface? pls specify
 
jirkaehm
newbie
Posts: 30
Joined: Tue Jan 09, 2007 12:07 pm

Sun May 20, 2007 12:05 pm

I want to limit connection per user.
thx for help, or link to thread in forum I did'nt find it :(
 
User avatar
mneumark
Member
Member
Posts: 370
Joined: Thu Jun 08, 2006 7:20 am
Location: Escalon, CA
Contact:

Mon May 21, 2007 9:04 am

I want to limit connection per user.
thx for help, or link to thread in forum I did'nt find it :(
Your best bet is to start in the filter section of the manual... It has a great example on the very top of the page...
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php

Example,
Drop all tcp connections after 5... per /32 address
/ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-limit=6,32 action=drop

Also, make sure connection tracking it on...

Matt
 
jirkaehm
newbie
Posts: 30
Joined: Tue Jan 09, 2007 12:07 pm

Mon May 21, 2007 10:49 pm

thanks for help.

But isn't 6 connection per user so small number? :)
If i look in my linux number users have between 2-50 opened connections.
 
User avatar
mneumark
Member
Member
Posts: 370
Joined: Thu Jun 08, 2006 7:20 am
Location: Escalon, CA
Contact:

Tue May 22, 2007 10:57 am

thanks for help.

But isn't 6 connection per user so small number? :)
If i look in my linux number users have between 2-50 opened connections.
Yes 6 is a very small number, a better bet would be 50-75 for connection limit unless you have a limited amount of packets per second.

Matt
 
sebac
Frequent Visitor
Frequent Visitor
Posts: 63
Joined: Thu Aug 10, 2006 2:16 am

Tue May 22, 2007 8:07 pm

thanks for help.

But isn't 6 connection per user so small number? :)
If i look in my linux number users have between 2-50 opened connections.
so this is normal???
Plz check my situation... thanks
http://forum.mikrotik.com/viewtopic.php?t=15851
many thanks

Who is online

Users browsing this forum: jinmt, wkahla and 57 guests