From: nuclearcat@nuclearcat.com
To: lartc@vger.kernel.org
Subject: Re[2]: [LARTC] Limit number of connections
Date: Tue, 23 Sep 2003 05:51:16 +0000 [thread overview]
Message-ID: <marc-lartc-106429647722473@msgid-missing> (raw)
Hello Rio,
Tuesday, September 23, 2003, 5:42:03 AM, you wrote:
Or you can use patch-o-matic connlimit + MARK.
"
This adds CONFIG_IP_NF_MATCH_CONNLIMIT match allows you to restrict the
number of parallel TCP connections to a server per client IP address
(or address block).
Examples:
# allow 2 telnet connections per client host
iptables -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT
"
But i am not sure, it is perfomant solution.
RM> On Monday 22 September 2003 21:21, Mihai Vlad wrote:
>> Hello again,
>> I have a router/nat linux box. I managed to create some HTB classes and
>> everything is OK.
>> When perople are usig download managers like FlashGet and DAP (multiple
>> connection ones), the ceil limiting works okay,
>> but the rate parameter is somehow useles... The guaranteed bandwidth is
>> never reached.
>> So what can I do to limit the number of connections/computer?
>> I want to make sure that they do not use more than one connection for
>> the download manager.
>> Thanks in advance
RM> Actually this is not Bandwidth Limiter task,
RM> this is could be handled by your proxy, like Squid. Check the configuration
RM> and enable maxconn ACL for file types: .exe .tar.gz .zip .iso .. etc ..
RM> - Rio.Martin -
RM> _______________________________________________
RM> LARTC mailing list / LARTC@mailman.ds9a.nl
RM> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
--
Best regards,
Denis mailto:admin@ams-sat.com
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
reply other threads:[~2003-09-23 5:51 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-106429647722473@msgid-missing \
--to=nuclearcat@nuclearcat.com \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.