Subject: Re: Session limit
To: Steven M. Bellovin <>
From: Rimantas Petrauskas <>
List: tech-net
Date: 04/04/2006 21:25:36
>>>>>>> is it possible to limit active sessions number by IP
>>>>>>> address[?]
>>>> In passing, why do you want to do this?  It sounds like an odd
>>>> desire, and I'm having trouble imagining any use for it.
>>> He's running a pr0n site and wants to keep a single IP addy from
>>> cranking up 100 concurrent wgets and leeching his pix?
>> We are ISP in Lithuania. I need to limit sessions for client IP whom
>> monthly fee is smallest :)
> Would limiting bandwidth do more of what you want?

I use old-ALTQ to limit bandwidth. But i also need to limit sessions.
Now i'm trying to limit bandwidth using ALTQ with PF. I'll try
"max-src-states and max-src-conn" as suggested by Joerg.

Rimantas Petrauskas,
UAB "Remo televizija"
Tinklo administratorius
Mob. tel.: 8-685-74915