Help to check firewall-start script

[zyu4router]

I wrote the following script to limit possible bad designed apps (P2P) for using too many sessions causing network issues.

But it seemed not working after I tested. Please kindly help to see if there is anything wrong.

Thanks in advance!

===============================================
#!/bin/sh

RATE=10
MAXCONN=100

iptables -I FORWARD -i br0 -p tcp --syn -s 192.168.1.0/24 -m limit --limit $RATE/s -j DROP
iptables -I FORWARD -i br0 -p tcp --syn --dport 1024:49151 -s 192.168.1.0/24 -m connlimit --connlimit-above $MAXCONN -j DROP

exit 0
===============================================

 

[RMerlin]

Keep in mind that Torrents mostly uses UDP these days, not TCP. That might also be the case with whichever application you are trying to throttle.

You will also need to disable NAT acceleration to be able to make use of the FORWARD chain.

 

[zyu4router]

Keep in mind that Torrents mostly uses UDP these days, not TCP. That might also be the case with whichever application you are trying to throttle.

You will also need to disable NAT acceleration to be able to make use of the FORWARD chain.

Thanks RMerlin for your prompt reply.

I am not worrying about the UDP session as the connection time out is quite short.

I will try to disable the NAT acceleration. thanks!!!