Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm using DD-WRT on my linksys router.

I want to limit each user on my network to 200 connections at any given time. Does anyone know the rules I enter the firewall in DD-WRT admit panel.

I tried the following with no luck:

iptables -I FORWARD -s -d 192.168.1.0/24 -p tcp -m connlimit --connlimit-above 150 -j DROP

iptables -I FORWARD -s -d 192.168.1.0/24 -p udp -m connlimit --connlimit-above 50 -j DROP
share|improve this question

migrated from stackoverflow.com Sep 24 '10 at 8:05

This question came from our site for professional and enthusiast programmers.

1  
I think that ipt_connlimit.o in included in the commercial version of DD-WRT so these lines basicly don't do anything. –  wqw Apr 11 '11 at 13:42
1  
Not an answer, but assuming the command works (ie the connlimit module is loaded), the commands you have issued would limit the entire class C to 150 simultaneous connections. You would probably want a separate line for each address (maybe script it with a for loop ???) Also I doubt you can "connection limit" UDP connections as UDP is stateless. Depending on what you are trying to do, maybe you can do something with QoS ? –  davidgo Jul 4 '13 at 8:47
add comment

1 Answer 1

Use the DD-WRT Script generator http://www.icpnet.pl/~robsonn/generator.zip

just follow the instruction in the software, it will generate the firewall script that you can copy and paste into DD-WRT firewall script.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.