how to block a multiple connection to a specific dst address

hi,

anyone know how to block a multiple connection to a specific dst. address?
i mean, i want each client i have, can only connect(open connection) to a specific dst. address once, so the second, third, and the rest, will be dropped/denied/whatever it is called.

thanks.

This rule would only allow one TCP connection at a time to IP 1.2.3.4.
It would be nice to do this for UDP but MT does not support it. UDP needs to be controlled by queues.

/ip firewall filter add action=drop chain=forward comment=“Only allow 1 connection to 1.2.3.4” connection-limit=1,32 disabled=no dst-address=1.2.3.4 protocol=tcp

-Louis

this means, only 1 client can connect to 1.2.3.4, right? how to set that every client can connect to 1.2.3.4 and one connection only for each of them?

That rule is for every client to be able to make one connection. That is what the 32 stands for.

-Louis

i see, thanks a lot bro :slight_smile: