Forum Moderators: phranque

Message Too Old, No Replies

Firewall software?

         

jake58

3:02 am on Dec 31, 2007 (gmt 0)

10+ Year Member



Is there any firewall software that will block multiple incoming connections from the same IP?

I am having a heck of a time searching for one.

thanks,

john

jtara

6:15 pm on Dec 31, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Is there any firewall software that will block multiple incoming connections from the same IP?

Are you sure you really want to do that? If you do this to your web site, you will slow it down to a crawl, as most browsers today take advantage of doing multiple downloads (images, etc.) simultaneously.

You can limit connections using your web server configuration files. But I wouldn't limit them to 1!

There are also a number of Apache plugins for throttling bandwidth and connections in various ways.

If you want to do this in your firewall, and you are using iptables, the scripts here may be of use (look near the bottom of the article for download location)

[ibm.com...]

jake58

7:45 pm on Dec 31, 2007 (gmt 0)

10+ Year Member



What I need is to allow an ip address for one or 2 connections. But if that same ip tries to make more, like a website copier, I need the firewall to shut it down.

I have some code in place to handle download managers, but website copiers are another story all together. They don't use your directory list to download files. They just need the ip and go for everything and use all bandwidth until done.

If you have to enter the ip of the person trying to copy you won't get it done. It needs to be automatic in the firewall.

jake58

7:46 pm on Dec 31, 2007 (gmt 0)

10+ Year Member



What I need is to allow an ip address for one or 2 connections. But if that same ip tries to make more, like a website copier, I need the firewall to shut it down.

I have some code in place to handle download managers, but website copiers are another story all together. They don't use your directory list to download files. They just need the ip and go for everything and use all bandwidth until done.

If you have to enter the ip of the person trying to copy you won't get it done. It needs to be automatic in the firewall.

jake58

7:46 pm on Dec 31, 2007 (gmt 0)

10+ Year Member



What I need is to allow an ip address for one or 2 connections. But if that same ip tries to make more, like a website copier, I need the firewall to shut it down.

I have some code in place to handle download managers, but website copiers are another story all together. They don't use your directory list to download files. They just need the ip and go for everything and use all bandwidth until done.

If you have to enter the ip of the person trying to copy you won't get it done. It needs to be automatic in the firewall.