I just quickly take a look at Apache (you didn't say what program you use, but on linux port 80, i'v think it could be apache) documentation and, as i think, it doesn't seem that there is any options to limit number of connections from the same IP address... (if i'm wrong, tell me please)
FTP server generally have this option...
If it's good idea ? it could be.
Could you inform me if it's bad or if you find better.
(Sorry for english)
Thanks, xa
Kamen TOMOV wrote:
Hi,
I am running a small LAN and my Internet provider has limited the number of my outgoing web connections. My clients use programs like Flashget that spawn multiple connections to the server when downloading big files from web sites and it is very likely that the limit will be reached.
That is why I would like to ask you if it is a good idea to use the connlimit match with iptables to restrict the number of parallel TCP connections to a server per client IP address.
I plan to do something like that:
iptables -p tcp --syn --dport 80 --dst www.warez.net -m connlimit \ --connlimit-above 2 -j REJECT
If you think that it is not a good idea could you please recommend a solution? Changing the provider is not an option :-)
Thanks in advance,
