Joerg Mertin wrote:
> It seems that the IE is issuing really way more requests than I assumed.
> I did put the Value to 20/sec:50 which should make it OK. If people really
> want to be faster in accessing my site - well - they'll be locked out.
> 

The problem with using LIMIT/BURST is that if some people really want fast
access then *other* people may be locked out. LIMIT/BURST limits the total
number of connections *from all clients*.

If you want to Limit the per-client connection rate, you need to use the
'Limit' action. With DNAT that means that you must configure separate DNAT-
and Limit rules.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to