limiting maximum number of connections per port. how?

Greetings,

Ive been using astaro firewall for a while, and i find it very good and stable, congratulations for this nice piece of software!

Currently some users are abusing our service, and they have dynamic IP, so its quite hard to get them. Even if i had the IPS license it wouldnt work, since it is a custom service, and they're not spamming packets, nothing like that.

to resolve my issue, all i have to do is to set a rule to limit the maximum number of connections on the destination port.

webui didnt support that, so i went for console, added the iptables command manually, but it didn't work.


I work with bridge mode, so we're probably talking about forward rules here.


these are the rules i tried, with no success.

iptables -A USR_FORWARD -p tcp --syn --sport 1:65535 --dport 6666 -m connlimit --connlimit-above 3 -j DROP

iptables -A FORWARD -p tcp --syn --sport 1:65535 --dport 6666 -m connlimit --connlimit-above 3 -j DROP

it appears correctly when i list iptables -nL, but it simply doesnt work!

what can I do in this case, this is really essential for us at this point!