How to do limit established connection in mikrotik ?

RouterOS Scripting
1

Dear All ,
I want to limit connection as per users thats meanes per IP, i use below command in my mikrotik
/ip firewall filter
add action=drop chain=forward connection-limit=50,32 connection-state=established log=yes protocol=tcp src-address-list=192.168.1.0/24

but connection limit applied for total block 192.168.1.0/24 , where 32 mask not working
anyone can help me with that issue?

Thanks
Sajib

2

Connection Limit :
Matches connections per address or address block after given value is reached. Should be used together with connection-state=new and/or with tcp-flags=syn because matcher is very resource intensive
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

3

Hi Zacharias,
Thanks for your replay.
I will check as per your instruction, I think it will be woked.

Thanks

4

Problem has been solved by using below command, connection limit by per IP from one network block
/ip firewall filter
add action=drop chain=forward comment=“TCP Connection Limits” connection-limit=200,32 protocol=tcp src-address=172.21.4.0/23 tcp-flags=syn


Thanks
Sajib Nandi

5

So the solution appears to be my answer… Isnt it ?