Community discussions

MikroTik App
  4. RouterOS
  5. General

How to limit number of established connections ?

Post Reply
 
atila
just joined
Topic Author
Posts: 20
Joined: Fri Jul 01, 2005 11:25 am

How to limit number of established connections ?

Tue Aug 23, 2005 10:42 am

I look at IP/FIREWALL/CONNECTIONS and see that one client have over 1000 established connections at same time. Can I somehow limit user or group to 50 connections??
Top
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6697
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:
Contact sergejs

Tue Aug 23, 2005 4:23 pm

try:
http://www.mikrotik.com/docs/ros/2.8/ip ... 4120351024
Top
 
sarenos
newbie
Posts: 42
Joined: Fri Feb 11, 2005 7:36 pm

Fri Aug 26, 2005 2:42 pm

anybody knoes how can I limit connections in version 2.9?
Top
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6697
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:
Contact sergejs

Mon Aug 29, 2005 11:39 am

Change syntax for 2.9 version, and try configuration like for 2.8.
Top
 
Art
Member Candidate
Member Candidate
Posts: 123
Joined: Thu Jan 27, 2005 10:14 pm

Tue Aug 30, 2005 1:17 pm

in 2.9 be like this
Code: Select all
add chain=forward protocol=tcp tcp-flags=syn connection-limit=100,32 action=drop comment="connection limit" disabled=no
this line is limiting tcp syn connections to 100 per ip i think
if i'm wrong then correct me :)
Top
 
kjagus
Frequent Visitor
Frequent Visitor
Posts: 74
Joined: Sun Jan 30, 2005 11:29 pm
Location: Poland

Tue Aug 30, 2005 6:20 pm

So, how to limit the UDP connections?...
Top
 
User avatar
tneumann
Member
Member
Posts: 394
Joined: Sat Apr 16, 2005 6:38 pm
Location: Germany

Tue Aug 30, 2005 7:17 pm

So, how to limit the UDP connections?...
Uhmm.... UDP is connection-less by design. There is no such thing as an "UDP connection" ...

--Tom
Top
 
kjagus
Frequent Visitor
Frequent Visitor
Posts: 74
Joined: Sun Jan 30, 2005 11:29 pm
Location: Poland

Wed Aug 31, 2005 12:19 am

sorry - you're right of course :oops: ... no matter how you call it :D, but I still cannot limit udp sessions...
Top
 
User avatar
tneumann
Member
Member
Posts: 394
Joined: Sat Apr 16, 2005 6:38 pm
Location: Germany

Wed Aug 31, 2005 9:39 am

See this discussion:
http://forum.mikrotik.com/viewtopic.php?t=4326

--Tom
Top
 
sarenos
newbie
Posts: 42
Joined: Fri Feb 11, 2005 7:36 pm

P2P connection limit

Wed Aug 31, 2005 1:38 pm

The problem of limiting connections is that if you have for example 50, and you have P2P programs you can use 50 connections for P2P and if you try to surf web or mail you cannot, because all possible connections are used by P2P.

So I think you have to mangle P2P packets and then limit connections to P2P packets.

Any suggestions or solution for this?
Top
 
spire2z
Long time Member
Long time Member
Posts: 516
Joined: Mon Feb 14, 2005 2:48 am

Wed Aug 31, 2005 7:48 pm

You can limit connections as said above and the limit you set can afect browsing if too low. I find around 70 - 100 is good.

There was a UDP connection limit patch available for IP Tables (Linux) I don't know if MT is IP tables based of if they have done their own thing? But it is possible.
Top
Post Reply
  4. RouterOS
  5. General