Would the following iptables command on an OpenWRT router assure that no one client has more than 50 active connections?

$ iptables -I FORWARD -m connlimit --connlimit-above 50 -j REJECT --reject-with tcp-reset
iptables v1.4.6: Couldn't load match `connlimit':File not found

If so, what package do I need to install to be able to use --connlimit?


I don't believe it is in the standard distribution. You will need to compile your own kernel. There is ticket with a patch already submitted.

iptables -I FORWARD -p tcp -s  -m connlimit --connlimit-above 20 -j DROP

Needs iptables conntrak extra package installed.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.