Subject: Re: Session limit
To: Steven M. Bellovin <smb@cs.columbia.edu>
From: Rimantas Petrauskas <rimantas@remo.lt>
List: tech-net
Date: 04/04/2006 21:25:36
>>>>>>> is it possible to limit active sessions number by IP
>>>>>>> address[?]
>>>> In passing, why do you want to do this?  It sounds like an odd
>>>> desire, and I'm having trouble imagining any use for it.
>>> He's running a pr0n site and wants to keep a single IP addy from
>>> cranking up 100 concurrent wgets and leeching his pix?
>>
>> We are ISP in Lithuania. I need to limit sessions for client IP whom
>> monthly fee is smallest :)
>>
> Would limiting bandwidth do more of what you want?

I use old-ALTQ to limit bandwidth. But i also need to limit sessions.
Now i'm trying to limit bandwidth using ALTQ with PF. I'll try
"max-src-states and max-src-conn" as suggested by Joerg.


-- 
Pagarbiai,
Rimantas Petrauskas,
UAB "Remo televizija"
Tinklo administratorius
Mob. tel.: 8-685-74915
E-mail: rimantas@remo.lt