What does connection-limit=! really mean?

connection-limit=!30,32

  1. Will above be TRUE for any number of connections except 30 or less than 31?
  2. Is mask applied on source or destination address?
  3. are new, established, invalid, related connections counted together?

thanks!

Ok so I run some tests and found the answer for

  1. <31
  2. source address

still I’m not sure how ROS is counting the connections. Does anybody know?

It’s called connection tracking.

/ip firewall connection print

Does connection-limit include half closed connections in the count?