connection limit per ip

connection limit per ip

[Mohammad Shakir]

[-- Attachment #1: Type: text/plain, Size: 690 bytes --]

I have red hat linux 7.3 with normail dialup and i have 15 clients which are connected with my linux box.
 
I am using simple MASQUERADING for internet sharing, now i want to put limit of 1kb limit for each user.
 
here is my rule for internet sharing, please advice me it is good enough or should i change my rule.
 
/sbin/iptables --flush
/sbin/iptables --table nat --flush
/sbin/iptables --delete-chain
/sbin/iptables --table nat --delete-chain
/sbin/iptables --table nat --append POSTROUTING -s 192.168.0.0/24 --out-interface ppp0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward 

		
---------------------------------
Do you Yahoo!?
Vote for the stars of Yahoo!'s next ad campaign!

[-- Attachment #2: Type: text/html, Size: 854 bytes --]

Re: connection limit per ip

[Antony Stone]

On Tuesday 20 July 2004 6:52 am, Mohammad Shakir wrote:

> I have red hat linux 7.3 with normail dialup and i have 15 clients which
> are connected with my linux box.
>
> I am using simple MASQUERADING for internet sharing, now i want to put
> limit of 1kb limit for each user.

Try the "dstlimit" match in current versions of netfilter.

Quoting from the man page: "This module allows you to  limit  the  packet  per  
second (pps) rate on a per destination IP or per destination port base.  As 
opposed to the `limit' match, every  destination ip / destination port has 
it's own limit."

Regards,

Antony.

-- 
Normal people think "If it ain't broke, don't fix it".
Engineers think "If it ain't broke, it doesn't have enough features yet".

                                                     Please reply to the list;
                                                           please don't CC me.