it suppose to limit each user connections to 8 only , i just wanna know whts the meaning of 8 ? is it 8 connections per sec ?? does it mean that the user can make 80 connections in 10 sec ??
the problem is that i have LINKSTAR satellite modem and it has a limited number of connections , so if the users keep making connections as they want , the DNS ping start timing out , and the internet will stop ..
i put another line in the firewall filter , i thought it will help me but i dont know exactly if its correct :
No, it limits concurrent connections, not the creation rate of new connections.
The input chain is for traffic that is entering the MT router and destined for the router itself and not being forwarded through the router and beyond. Thus, the input chain is probably not what you want to use.
By the way, you probably should not drop when the maximum number of concurrent connections has been reached but rather reject with tcp-reset, or client TCP connections will hang while trying to be established rather than being immediately cut down.
my problem is i’m using a satellite modem which has limited connections , i need any rule that deny any no of connections more that what the modem accept .
How, exactly, does this modem define a “connection”? Does it really examine the TCP layer? Is this really just a modem or does this box try to do other things on layer 3, such as masquerading, and runs into limits at that point?
yes it examine TCP layer , and it has a REAL or Public IP given by my provider , as the MT has a second Public IP , its IP defined as the Gateway IP in MT ..
Really i dont know when the connection limiting rule begin to limit the connections .. i set 4,32 .. i opened a group of 25 site at the same time and no limiting happened ??
also i downloaded 3 files at the same time using a download accl. which splits each file to 5 splits , nothing happened !!! no limiting at all .. i can see the limitaion in another rule with action = log .. no limiting at all !!!