NAT Connection Limit

RouterOS General
1

Hello all,

I’ve got an issue with limiting nat connections. Currently we have a number of people connection using the hotspot system that are nat-ed out via a single public IP. In the NAT rules I have masquerade rules setup, but can’t change the connection limits on these. I’d like to be able to limit this to something like 100 per person, as the connection goes over a wireless link and tends to flood it if someone on the inside gets a virus.

How would I go about this, as currently (I’m using winbox) the settings are just disabled.

Regards.

2

this rule sets limit to 100 TCP connections per each user in the network,
/ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-limit=101,32 action=drop

3

Thank you.