Re: ipfw limit src-addr woes

2007-02-22 Thread Ian Smith
On Wed, 21 Feb 2007, Julian Elischer wrote: > Ian Smith wrote: > > On Tue, 20 Feb 2007, Julian Elischer wrote: > > > admin wrote: > > > > > > > Wrong: the implied "check-state" done by the "limit" lets the > > connection > > > > through (i.e. performs the action) iff there's state rec

Re: ipfw limit src-addr woes

2007-02-21 Thread Julian Elischer
Ian Smith wrote: On Tue, 20 Feb 2007, Julian Elischer wrote: > admin wrote: > > > Wrong: the implied "check-state" done by the "limit" lets the connection > > through (i.e. performs the action) iff there's state recorded for it > > (src-addr+src-port+dst-addr+dst-port). If however it's a

Re: ipfw limit src-addr woes

2007-02-21 Thread admin
Ian Smith wrote: On Tue, 20 Feb 2007, Julian Elischer wrote: > admin wrote: > > > Wrong: the implied "check-state" done by the "limit" lets the connection > > through (i.e. performs the action) iff there's state recorded for it > > (src-addr+src-port+dst-addr+dst-port). If however it's a

Re: ipfw limit src-addr woes

2007-02-20 Thread Ian Smith
On Tue, 20 Feb 2007, Julian Elischer wrote: > admin wrote: > > > Wrong: the implied "check-state" done by the "limit" lets the connection > > through (i.e. performs the action) iff there's state recorded for it > > (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet > > in

Re: ipfw limit src-addr woes

2007-02-20 Thread Julian Elischer
admin wrote: Wrong: the implied "check-state" done by the "limit" lets the connection through (i.e. performs the action) iff there's state recorded for it (src-addr+src-port+dst-addr+dst-port). If however it's a SYN packet incoming and the number of current states is trying to cross the limi

Re: ipfw limit src-addr woes

2007-02-20 Thread admin
Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: > Ian Smith wrote: > > On Mon, 19 Feb 2007, admin wrote: > > > Andre Santos wrote: > > > > On 2/18/07, admin <[EMAIL PROTECTED]> wrote: > > > > > > > >> Hi, I'm trying to use ipfw's limit clause to limit the number of > > > >> conne

Re: ipfw limit src-addr woes

2007-02-19 Thread Ian Smith
On Mon, 19 Feb 2007, admin wrote: > Ian Smith wrote: > > On Mon, 19 Feb 2007, admin wrote: > > > Andre Santos wrote: > > > > On 2/18/07, admin <[EMAIL PROTECTED]> wrote: > > > > > > > >> Hi, I'm trying to use ipfw's limit clause to limit the number of > > > >> connections a single IP c

Re: ipfw limit src-addr woes

2007-02-19 Thread admin
Ian Smith wrote: On Mon, 19 Feb 2007, admin wrote: > Andre Santos wrote: > > On 2/18/07, admin <[EMAIL PROTECTED]> wrote: > > > >> Hi, I'm trying to use ipfw's limit clause to limit the number of > >> connections a single IP can have at the same time in a transparent > >> web-proxy enviro

Re: ipfw limit src-addr woes

2007-02-19 Thread Ian Smith
On Mon, 19 Feb 2007, admin wrote: > Andre Santos wrote: > > On 2/18/07, admin <[EMAIL PROTECTED]> wrote: > > > >> Hi, I'm trying to use ipfw's limit clause to limit the number of > >> connections a single IP can have at the same time in a transparent > >> web-proxy environment: > >> > >> 0

Re: ipfw limit src-addr woes

2007-02-19 Thread admin
Andre Santos wrote: On 2/18/07, admin <[EMAIL PROTECTED]> wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80

Re: ipfw limit src-addr woes

2007-02-18 Thread admin
admin wrote in msgid: <[EMAIL PROTECTED]> Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit

Re: ipfw limit src-addr woes

2007-02-18 Thread Kees Plonsz
admin wrote in msgid: <[EMAIL PROTECTED]> > Hi, I'm trying to use ipfw's limit clause to limit the number of > connections a single IP can have at the same time in a transparent > web-proxy environment: > > 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port > 80 in via if0 se

ipfw limit src-addr woes

2007-02-18 Thread admin
Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit src-addr 10 00401 fwd local.ip.ad.dr,8080 tc

Re: ipfw limit src-addr woes

2007-02-17 Thread Abdullah Ibn Hamad Al-Marri
On 2/17/07, admin <[EMAIL PROTECTED]> wrote: Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limi

ipfw limit src-addr woes

2007-02-17 Thread admin
Hi, I'm trying to use ipfw's limit clause to limit the number of connections a single IP can have at the same time in a transparent web-proxy environment: 00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 80 in via if0 setup limit src-addr 10 00401 fwd local.ip.ad.dr,808