limit number of tcp connection for a GID

[Giorgos Keramidas]

On 2005-06-05 19:56, Riccardo Giuntoli <taglio at gmail.com> wrote:
> Hi folks,
> Do you have any idea for limiting the number of tcp ESTABLISHED
> connections for a GID?

ipfw can match connections per uid/gid and it also has limiting
capabilities.  When combined with dummynet, it can also enforce
bandwidth limits.  See the ipfw(8) manpage for details.

I'm not sure if pf does this already.  Even if it doesn't though,
it may be possible to write a transparent proxy that limits the
connections per uid/gid.  The support for transparent proxies in
pf is awesome :-)