One OR MORE of source and destination addresses?

Mark admin at asarian-host.net
Mon Aug 2 08:34:03 PDT 2004


Color me confused. The ipfw manual says:

    limit {src-addr | src-port | dst-addr | dst-port} N
    The firewall will only allow N connections with the same set of
    parameters as specified in the rule. One or more of source and
    destination addresses and ports can be specified.

If "One or more of source and destination addresses and ports can be
specified", then I'd like to limit both the total amount of connections, as
well as per-src. Something like this:

ipfw check-state ipfw add allow tcp from any to me 25 setup limit dst-addr
32 src-addr 8

The error I get is:

"ipfw: only one of keep-state and limit is allowed"

So, how can I specify "One OR MORE of source and destination addresses" in
the rule to achieve this effect?

Thanks,

- Mark



More information about the freebsd-questions mailing list