1. Forum
  2. MicroNet
  3. MIN COMP

  • OPNSense, maximum connections per source...

    From Shurato@618:300/50 to All on Thu Jul 31 17:33:00 2025
    How do I set this for a protocol? Google says it's an option, but it's not.

    I need to set 1 connection per IP for Telnet and SSH, 2 for NNTP and 3 for
    FTP, but I can't figure out how to do that...

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Shurato@618:300/50 to Shurato on Thu Jul 31 19:19:00 2025
    How do I set this for a protocol? Google says it's an option, but it's not.

    I need to set 1 connection per IP for Telnet and SSH, 2 for NNTP and 3 for FTP, but I can't figure out how to do that...

    Ok, looks like it's max source states. If I set that, I have to pass the
    rule. Do I set this for LAN or WAN? I've tried both, applied the rule and
    was able to connect from an IP behind a VPN more than once.

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)
  • From Shurato@618:300/50 to Shurato on Sun Aug 10 20:18:00 2025
    How do I set this for a protocol? Google says it's an option, but
    it's
    not.

    I need to set 1 connection per IP for Telnet and SSH, 2 for NNTP and
    3 for
    FTP, but I can't figure out how to do that...

    Ok, looks like it's max source states. If I set that, I have to pass the rule. Do I set this for LAN or WAN? I've tried both, applied the rule and was able to connect from an IP behind a VPN more than once.

    Rule needed to be as WAN, with an unassociated rule made from the port forwarding rule. It's all working great now! I think this may have been easier to do with OPNSense than PFSense. With the latter, it seemed to
    require HAPROXY, which I never got to work right... Anyway, success!

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (618:300/50)