Re: [m0n0wall] Limit nat translations on single IP

From:	Chris Buechler <cbuechler at gmail dot com>
To:	krzys at wroclaw dot dialog dot net dot pl
Cc:	m0n0wall at lists dot m0n0 dot ch
Subject:	Re: [m0n0wall] Limit nat translations on single IP
Date:	Sun, 3 Oct 2004 05:41:21 -0400

On Sun, 03 Oct 2004 11:31:33 +0200, Krzysztof Syguda
<krzys at wroclaw dot dialog dot net dot pl> wrote:
> Do somebody know, how to limit numbers of nat translations (PAT)  to
> single IP numbers.

Well since I believe it has to map a port number to each connection,
the limit with a single public IP would be 65,535. (the max number of
ports it could possibly use)

You'll hit the state table limit in m0n0wall way before that, which I
believe is compiled in right now at 4,000 simultanous sessions (IIRC).

-Chris