Hi,

I have a very simple server setup, using shorewall as my firewall. I
have a line like this at the top of my rules file to allow ssh
connections, but limited to 3 connection per minute with a burst rate
of 3:

SSH/ACCEPT      net     $FW             -       -       -
 -               3/min:3         -

Now when I have that in place, and from a remote machine run scp
server:/some/file ., I find that the scp stalls after a few kb
reproducibly. Altering the above line to

SSH/ACCEPT      net     $FW

i.e. with no connection rate limiting fixes the issue and all is well.

My understanding of scp is that it opens a connection and uses that
for the whole file, and so it shouldn't be exceeding the connection
limit. So what am I doing wrong? I really would like to limit ssh
connections.

Thanks
Jonathan

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to