Hello group I have been working on limiting the maximum number of connections a client device can make and not having much luck so far.
What I have at this point I will post below, if anyone has input on where I may be in error would be greatly appreciated.
114 ;;; LIMIT 100 CONNECTIONS WLAN
chain=forward action=drop tcp-flags=syn src-address=172.16.5.0/24
protocol=tcp packet-mark=all connection-limit=100,32
115 ;;; LIMIT 100 CONNECTIONS LAN
chain=forward action=drop tcp-flags=syn src-address=192.168.100.0/24
protocol=tcp packet-mark=all connection-limit=100,32
I have tried placing these rules at the top and bottom of in ‘ip firewall filter’, yet the counter never moves and my trunk interceptor continues to inform me of clients exceeding a 157 connections.
FYI: I am running masquerade between ether1 and wlan1.
Thank you
Regards