Re: [Shorewall-users] Suppress logging on ConnLimit rules?

2012-06-14 Thread J Jude
Tom Eastep teastep at shorewall.net writes: On 06/13/2012 11:32 AM, J Jude wrote: How do I suppress logging on packets that are over the CONNLIMIT? I assume that you are referring to the CONNLIMIT column in the policy file as opposed to the CONNLIMIT column in the rules file. No, it really

Re: [Shorewall-users] Suppress logging on ConnLimit rules?

2012-06-14 Thread Tom Eastep
On 06/14/2012 09:36 AM, J Jude wrote: Tom Eastepteastepat shorewall.net writes: On 06/13/2012 11:32 AM, J Jude wrote: How do I suppress logging on packets that are over the CONNLIMIT? I assume that you are referring to the CONNLIMIT column in the policy file as opposed to the CONNLIMIT

[Shorewall-users] Suppress logging on ConnLimit rules?

2012-06-13 Thread J Jude
How do I suppress logging on packets that are over the CONNLIMIT? Users downloading from our server will use multiple wgets to maximize the amount that they can download. It's not the best technique, but it's human nature to go for the simplest workaround. To avoid a DOS from one person trying

Re: [Shorewall-users] Suppress logging on ConnLimit rules?

2012-06-13 Thread Tom Eastep
On 06/13/2012 11:32 AM, J Jude wrote: How do I suppress logging on packets that are over the CONNLIMIT? Users downloading from our server will use multiple wgets to maximize the amount that they can download. It's not the best technique, but it's human nature to go for the simplest