MikroTik

Hi,

has someone some help how to make a filter rule which maches something like

"number of tcp connections per second"?

Is this possible at all?

Thanks for any feedback here.

Achim

okay, was able to solve this by myself by just searching the forum.

Sorry for the spam..

Achim

hi there,
do u want to limit number of tcp conn per user or per interface? pls specify

I want to limit connection per user.
thx for help, or link to thread in forum I did'nt find it

I want to limit connection per user.
thx for help, or link to thread in forum I did'nt find it

Your best bet is to start in the filter section of the manual... It has a great example on the very top of the page...
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php

Example,
Drop all tcp connections after 5... per /32 address
/ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-limit=6,32 action=drop

Also, make sure connection tracking it on...

Matt

thanks for help.

But isn't 6 connection per user so small number?
If i look in my linux number users have between 2-50 opened connections.

thanks for help.

But isn't 6 connection per user so small number?
If i look in my linux number users have between 2-50 opened connections.

Yes 6 is a very small number, a better bet would be 50-75 for connection limit unless you have a limited amount of packets per second.

Matt

thanks for help.

But isn't 6 connection per user so small number?
If i look in my linux number users have between 2-50 opened connections.

so this is normal???
Plz check my situation... thanks
http://forum.mikrotik.com/viewtopic.php?t=15851
many thanks