Community discussions

MikroTik App
 
ZamNam
just joined
Topic Author
Posts: 16
Joined: Wed Sep 16, 2009 5:30 am

limiting the number of udp sessions

Thu Feb 18, 2010 5:21 pm

how can i limit the number of udp session for a specific ip address or mac address in the firewall filter ?
thank u in advance
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8383
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: limiting the number of udp sessions

Thu Feb 18, 2010 5:30 pm

yep, it it possible to expand 'connection-limit' firewall matcher to non-tcp connections?
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
fewi
Forum Guru
Forum Guru
Posts: 7734
Joined: Tue Aug 11, 2009 3:19 am

Re: limiting the number of udp sessions

Thu Feb 18, 2010 5:53 pm

[admin@MikroTik] > /ip firewall filter
[admin@MikroTik] /ip firewall filter> add chain=forward src-address=10.1.0.1 protocol=udp connection-limit=11,32 action=drop
failure: connection limit works only with tcp
Nope. connection-limit only works with TCP.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8383
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: limiting the number of udp sessions

Thu Feb 18, 2010 6:40 pm

MT Staff?..
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
cartes
newbie
Posts: 41
Joined: Fri Oct 12, 2007 12:23 am

Re: limiting the number of udp sessions

Sat Feb 20, 2010 11:13 pm

UDP is a connection-less protocol, meaning there is no concept of "connection", and therefore, "connection-limit" cannot be applied.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8383
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: limiting the number of udp sessions

Sun Feb 21, 2010 1:08 am

sure. but we can see udp 'connections' in Firewall Connections. why can't we limit by number of such 'streams'? also, you NAT whole udp 'connection', not every packet of it - so there ARE concept of 'udp connection' in RouterOS =)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
angboontiong
Forum Guru
Forum Guru
Posts: 1115
Joined: Fri Jan 16, 2009 9:59 am

Re: limiting the number of udp sessions

Fri Jun 01, 2012 1:39 pm

Hi...

any news about this?

thanks...
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 6013
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: limiting the number of udp sessions

Fri Jun 01, 2012 1:53 pm

Starting already from v5.7 connection-limit can be used to limit other protocols, too.
 
angboontiong
Forum Guru
Forum Guru
Posts: 1115
Joined: Fri Jan 16, 2009 9:59 am

Re: limiting the number of udp sessions

Fri Jun 01, 2012 6:08 pm

Starting already from v5.7 connection-limit can be used to limit other protocols, too.
let say we set the limit to 20 session, but on the connection we can see the testing ip just running on 10 tcp connection...
we try the connection limit, it will effect the services like youtube even just under 10 tcp session...

am i doing the wrong thing?

and, would you mind to provide wiki link for reference...

thanks...
 
Benik3
newbie
Posts: 46
Joined: Thu Apr 04, 2013 11:41 am

Re: limiting the number of udp sessions

Sun Oct 13, 2013 8:50 pm

So this should work?
chain=forward action=add-src-to-address-list p2p=all-p2p connection-state=new protocol=udp 
     address-list=UDP over limit address-list-timeout=0s connection-limit=100,32
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8383
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: limiting the number of udp sessions

Mon Oct 14, 2013 5:39 pm

yes
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.

Who is online

Users browsing this forum: Google [Bot], sindy, w0lt and 107 guests