limit number of tcp connection for a GID

Riccardo Giuntoli taglio at
Sun Jun 5 18:36:13 GMT 2005

On 6/5/05, Giorgos Keramidas <keramida at> wrote:
> I'm not sure if pf does this already.  Even if it doesn't though,
> it may be possible to write a transparent proxy that limits the
> connections per uid/gid.  The support for transparent proxies in
> pf is awesome :-)
I've found this on pf.conf(5) manpage:
     All three of keep state, modulate state and synproxy state support the
     following options:

     max _number_
	   Limits the number of concurrent states the rule may create.	When
	   this limit is reached, further packets matching the rule that would
	   create state are dropped, until existing states time out.
Thank you Giorgios
Name: Riccardo Giuntoli
Email: taglio at
Location: Genova, Italy
6BONE Handle: RG581-6BONE
PGP Key: 0x67123739
PGP Fingerprint: CE75 16B5 D855 842F AB54 
                          FB5C DDC6 4640 6712 3739
Key server: hkp://

More information about the freebsd-questions mailing list