How to limit maximum number of TCP connections

[jdow]

On 2012/06/28 01:24, Jatin K wrote:
> On 06/28/2012 01:33 PM, jdow wrote:
>> On 2012/06/27 23:27, Jatin K wrote:
>>> On 06/28/2012 11:32 AM, Ed Greshko wrote:
>>>> On 06/28/2012 01:27 PM, Jatin K wrote:
>>>>> well..... suppose I've 5 clients in my office ( say A,B, C, D, E ) and a
>>>>> linux box
>>>>> which is working as a router ( gateway ), I want  to allow only 4 concurrent
>>>>> pcs to
>>>>> access the Internet, say if A,B,C,D is using internet then fifth client E can
>>>>> not
>>>>> access the internet until any of previous connected clients ( A,B,C, or D)
>>>>> gets
>>>>> disconnected/session ended
>>>> Define "access internet".....
>>>>
>>>> Do you mean *all* protocols?  So, you want to stop a 5th system from browsing,
>>>> ftp,
>>>> ssh, ntp, pop, imap, etc?  So, if A, B, C, and D are using these
>>>> protocols...which
>>>> can happen without direct user input (pop/imap polls, facebook and rss feed
>>>> updates,
>>>> etc.)  you want to block E for an indeterminate amount of time?
>>> exactly
>>>
>>>>
>>>> Seriously?
>>> yes, its my client's requirement ......  I can understand its not the way to go
>>> .... but he pays me for this ... I'm a service provider .. I have to do what
>>> they said and want to do
>>>
>>>> I think you need to state the problem you are trying to solve....not ask for a
>>>> solution which really sounds wrong headed.
>> If A, B, C, and D are browsing CNN, MSNBC, ABC, and FoxNews is the limit on
>> E that he cannot browse CBS or that he cannot make an ftp file transfer or
>> his machine cannot attempt an NTP clock synchronization until one of the
>> others quits using the network?
>>
> if A,B,C and D are using Internet then E must not have Internet access , like
> web-browsing, send/receive email, ftp Etc....
>
> if it can be achieved by proxy (squid like)  .. I can suggest them

In theory it can. In practice it cannot unless users are forcibly timed
out after X seconds of connect time and then locked off for a period to
prevent them from logging right back in. Without knowledge of precisely
what is wanted you cannot answer the homework question, Charlie.

{^_^}