I need to limit the number of allowed IP addresses for a rule. IP addresses are allocated by DHCP and are not in my control.
So logic would be:
- Allow connection from Source Address List
- Add IP address for 24 hours to Source Address List if list contains 5 or fewer addresses
I don’t know how to enforce the limit on number of IP addresses in the list.
Also, I’d prefer to use MAC Addresses although that is not essential.
Thanks in advance for any suggestions!
Restate your problem, but not in terms of address lists and such.
What are you trying to do?
I only want to allow 5 source computers (hence preference for MAC address over IP address) to use a remote service. I do not know what those 5 addresses will be so they need to be dynamically added to a list. The list entries should age out after, say, 24 hours.
Intent is to allow only 5 computers on a remote network to access a service. (5 is an arbitrary number; it might be any number but the principle is the same.)
Hopefully that is clearer?
I don’t think address list is going to work like this. There might be a way to do this with rate-limit matching - basically allow connections to the remote site so long as the connection rate is below 5 per day (don’t know if it holds statistics like this or not)