Terminate the connection when it reachs 1mb w/ iptables

Hi all...


I need to receive uploaded files and also would like to limit the size
of the files like email attatchements are limited.
Every time the user tries files larger than some kb, it terminates the
connection when it reachs the limit.

Is it possible to do it with iptables?

On 17 Jun 2006, in the Usenet newsgroup comp.os.linux.networking, in article
<(E-Mail Removed) .com>, (E-Mail Removed)
wrote:

>I need to receive uploaded files and also would like to limit the size
>of the files like email attatchements are limited.
>Every time the user tries files larger than some kb, it terminates the
>connection when it reachs the limit.

How do you know that this packet is part of a single file. How do you
know that this download isn't trying to get 20 mails averaging 50KB in
size, verses one mail of 1 MB?

>Is it possible to do it with iptables?

I'd rather doubt it - perhaps a proxy server would be more suitable.

Old guy

On Sun, 18 Jun 2006 15:42:04 -0500, (E-Mail Removed) (Moe Trin) wrote:

>On 17 Jun 2006, in the Usenet newsgroup comp.os.linux.networking, in article
><(E-Mail Removed) s.com>, (E-Mail Removed)
>wrote:
>
>>I need to receive uploaded files and also would like to limit the size
>>of the files like email attatchements are limited.
>>Every time the user tries files larger than some kb, it terminates the
>>connection when it reachs the limit.
>
>How do you know that this packet is part of a single file. How do you
>know that this download isn't trying to get 20 mails averaging 50KB in
>size, verses one mail of 1 MB?
>
>>Is it possible to do it with iptables?
>
>I'd rather doubt it - perhaps a proxy server would be more suitable.

Someone out there has a tcp connection cutter, but as you suggest, if
a single tcp connection carries several emails one gets into trouble.
Can OP enforce per email tcp connection?

Grant.
--
Cats are smarter than dogs. You can't make eight cats pull
a sled through the snow.

Grant wrote:
> On Sun, 18 Jun 2006 15:42:04 -0500, (E-Mail Removed) (Moe Trin) wrote:
>
> Someone out there has a tcp connection cutter, but as you suggest, if
> a single tcp connection carries several emails one gets into trouble.
> Can OP enforce per email tcp connection?
>

I think that the right word is "connection cutter"! That is it. Let's
think on a website ok? One page will never exceed 1MB. So, what i have
to do is limit the connections by some Kb. If it exceed 1mb for
example, terminate it.

Any hint?