Matching number of tcp connections per time...

RouterOS General
1

Hi,

has someone some help how to make a filter rule which maches something like

“number of tcp connections per second”?

Is this possible at all?

Thanks for any feedback here.

Achim

2

okay, was able to solve this by myself by just searching the forum.

Sorry for the spam..

Achim

3

hi there,
do u want to limit number of tcp conn per user or per interface? pls specify

4

I want to limit connection per user.
thx for help, or link to thread in forum I did’nt find it :frowning:

5

Your best bet is to start in the filter section of the manual… It has a great example on the very top of the page…
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php

Example,
Drop all tcp connections after 5… per /32 address
/ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-limit=6,32 action=drop

Also, make sure connection tracking it on…

Matt

6

thanks for help.

But isn’t 6 connection per user so small number? :slight_smile:
If i look in my linux number users have between 2-50 opened connections.

7

Yes 6 is a very small number, a better bet would be 50-75 for connection limit unless you have a limited amount of packets per second.

Matt

8

so this is normal???
Plz check my situation… thanks
http://forum.mikrotik.com/t/solved-too-much-firewall-connections-wtf/13495/1
many thanks