limit number of tcp connection for a GID

Giorgos Keramidas keramida at
Sun Jun 5 18:13:25 GMT 2005

On 2005-06-05 19:56, Riccardo Giuntoli <taglio at> wrote:
> Hi folks,
> Do you have any idea for limiting the number of tcp ESTABLISHED
> connections for a GID?

ipfw can match connections per uid/gid and it also has limiting
capabilities.  When combined with dummynet, it can also enforce
bandwidth limits.  See the ipfw(8) manpage for details.

I'm not sure if pf does this already.  Even if it doesn't though,
it may be possible to write a transparent proxy that limits the
connections per uid/gid.  The support for transparent proxies in
pf is awesome :-)

More information about the freebsd-questions mailing list