I want to implement this firewall rule
Code: Select all
add chain=forward action=accept connection-state=new protocol=tcp connection-limit=!30,32 comment="Allow up to 30 connections" disabled=no
add chain=forward action=log connection-state=new protocol=tcp log-prefix="" comment="To see who is being dropped, we log first" disabled=no
Edit:
Okay, i've tried this but i haven't fully activate it yet.
as far as i understand the backbone links will hit their respective rules and then stop but all the other links will go past those until they hit the connection rule and stop there.2 chain=forward action=accept protocol=tcp in-interface=backbone1
3 chain=forward action=accept protocol=tcp out-interface=backbone1
4 chain=forward action=accept protocol=tcp in-interface=backbone2
5 chain=forward action=accept protocol=tcp out-interface=backbone2
6 X ;;; Allow up to 30 connections
chain=forward action=accept connection-state=new protocol=tcp
connection-limit=!30,32
Am i correct in this thinking