Hi,
I am running a small LAN and my Internet provider has limited the
number of my outgoing web connections. My clients use programs like
Flashget that spawn multiple connections to the server when
downloading big files from web sites and it is very likely that the
limit will be reached.
That is why I would like to ask you if it is a good idea to use the
connlimit match with iptables to restrict the number of parallel TCP
connections to a server per client IP address.
I plan to do something like that:
iptables -p tcp --syn --dport 80 --dst www.warez.net -m connlimit \
--connlimit-above 2 -j REJECT
If you think that it is not a good idea could you please recommend a
solution? Changing the provider is not an option :-)
Thanks in advance,
--
Kamen TOMOV
