This rule has some packets and bytes on the statistcs but if I go to the connections tab on the winbox (IP-FIREWALL-CONNECTIONS TAB) I can count more than 5 TCP connections by host .
How can I limit the connections on my network??? I want that each client connected on my mikrotik AP can open 10 connection simultaneos.
Regarding the maximum number opened by a Client, that can be called syn attack, I’m asking but our Internet service provider how manage this issue or state?
Because I monitoring the number of connection on my ADSL line and it support until 1700 connection /sec.
But on my internal net I must reduce it to 70-80 to have not syn attack detection.
Hello, I was having the same problem, but If you check the user´s manual, when you see CONNECTIONS in firewall it reports connections from hours ago (or days) and specially the TCP connections are kept for days even if the client has been disconnected. Why dont you try to monitor one client ip with torch in the winbox, you will see that connlimit is working.
But doesn’t that just reduce the time Tik tracks the connection? What happends to connections that ARE still established, but are not currently active (for example somebody on p2p queue)?
.