Hi friends, I would like to explain you my problem.
I need to limit p2p and fallback connections into my network, but I have obtained limit tcp connections from Src. address to web, but I can´t do the same from the web to my Dst.Address. I put my filter rules limiting two connections in two ways.
;;; limite conexiones fallback
chain=forward action=drop protocol=tcp src-address=62.82.29.0/24
connection-mark=fallback connection-limit=2,32
chain=forward action=drop protocol=tcp dst-address=62.82.29.0/24
connection-mark=fallback connection-limit=2,32
;;; limite conexiones p2p
chain=forward action=drop protocol=tcp src-address=62.82.29.0/24
connection-mark=p2p connection-limit=2,32
chain=forward action=drop protocol=tcp dst-address=62.82.29.0/24
connection-mark=p2p connection-limit=2,32
But it only works src-address rule as you can see, I need limit tcp connection from web to y network because it causes high pings to my users. Thanks
