limit number of tcp connection for a GID
Riccardo Giuntoli
taglio at gmail.com
Sun Jun 5 18:36:13 GMT 2005
On 6/5/05, Giorgos Keramidas <keramida at freebsd.org> wrote:
...
> I'm not sure if pf does this already. Even if it doesn't though,
> it may be possible to write a transparent proxy that limits the
> connections per uid/gid. The support for transparent proxies in
> pf is awesome :-)
I've found this on pf.conf(5) manpage:
STATEFUL TRACKING OPTIONS
All three of keep state, modulate state and synproxy state support the
following options:
max _number_
Limits the number of concurrent states the rule may create. When
this limit is reached, further packets matching the rule that would
create state are dropped, until existing states time out.
Thank you Giorgios
Bye
--
Name: Riccardo Giuntoli
Email: taglio at gmail.com
Homepage: http://www.luxoro.org/
Location: Genova, Italy
6BONE Handle: RG581-6BONE
PGP Key: 0x67123739
PGP Fingerprint: CE75 16B5 D855 842F AB54
FB5C DDC6 4640 6712 3739
Key server: hkp://wwwkeys.eu.pgp.net
More information about the freebsd-stable
mailing list