Re: ipfw limit src-addr woes

2007-02-22 Thread Ian Smith
On Wed, 21 Feb 2007, Julian Elischer wrote: Ian Smith wrote: On Tue, 20 Feb 2007, Julian Elischer wrote: admin wrote: Wrong: the implied check-state done by the limit lets the connection through (i.e. performs the action) iff there's state recorded for it

Re: ipfw limit src-addr woes

2007-02-21 Thread admin
Ian Smith wrote: On Tue, 20 Feb 2007, Julian Elischer wrote: admin wrote: Wrong: the implied check-state done by the limit lets the connection through (i.e. performs the action) iff there's state recorded for it (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet

Re: ipfw limit src-addr woes

2007-02-21 Thread Julian Elischer
Ian Smith wrote: On Tue, 20 Feb 2007, Julian Elischer wrote: admin wrote: Wrong: the implied check-state done by the limit lets the connection through (i.e. performs the action) iff there's state recorded for it (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet

Re: ipfw limit src-addr woes

2007-02-20 Thread admin
Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: Andre Santos wrote: On 2/18/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can

Re: ipfw limit src-addr woes

2007-02-20 Thread Julian Elischer
admin wrote: Wrong: the implied check-state done by the limit lets the connection through (i.e. performs the action) iff there's state recorded for it (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet incoming and the number of current states is trying to cross the limit,

Re: ipfw limit src-addr woes

2007-02-20 Thread Ian Smith
On Tue, 20 Feb 2007, Julian Elischer wrote: admin wrote: Wrong: the implied check-state done by the limit lets the connection through (i.e. performs the action) iff there's state recorded for it (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet incoming and

Re: ipfw limit src-addr woes

2007-02-19 Thread admin
Andre Santos wrote: On 2/18/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80

Re: ipfw limit src-addr woes

2007-02-19 Thread Ian Smith
On Mon, 19 Feb 2007, admin wrote: Andre Santos wrote: On 2/18/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp

Re: ipfw limit src-addr woes

2007-02-19 Thread admin
Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: Andre Santos wrote: On 2/18/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment:

Re: ipfw limit src-addr woes

2007-02-19 Thread Ian Smith
On Mon, 19 Feb 2007, admin wrote: Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: Andre Santos wrote: On 2/18/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time

ipfw limit src-addr woes

2007-02-18 Thread admin
Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit src-addr 10 00401 fwd local.ip.ad.dr,8080

Re: ipfw limit src-addr woes

2007-02-18 Thread Kees Plonsz
admin wrote in msgid: [EMAIL PROTECTED] Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup

Re: ipfw limit src-addr woes

2007-02-18 Thread admin
admin wrote in msgid: [EMAIL PROTECTED] Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit

ipfw limit src-addr woes

2007-02-17 Thread admin
Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit src-addr 10 00401 fwd

Re: ipfw limit src-addr woes

2007-02-17 Thread Abdullah Ibn Hamad Al-Marri
On 2/17/07, admin [EMAIL PROTECTED] wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit