Opened 8 years ago

Closed 4 years ago

Last modified 4 years ago

#6168 closed enhancement (fixed)

add connlimit netfilter module

Reported by: arteqw@… Owned by: developers
Priority: normal Milestone: Barrier Breaker 14.07
Component: kernel Version:
Keywords: Cc:


here is a patch for 8.09.1 that add connlimit netfilter module

Attachments (2)

netfilter-connlimit.patch (10.8 KB) - added by arteqw@… 8 years ago.
netfilter-connlimit-2.6.patch (890 bytes) - added by Marcos Tadeu <marcos@…> 6 years ago.

Download all attachments as: .zip

Change History (16)

Changed 8 years ago by arteqw@…

comment:1 Changed 7 years ago by anonymous

me too - I'd really like to see connlimit in OpenWRT.

comment:2 Changed 7 years ago by dongshuzhao@…

I tried with backfire and it didn't work. :(

comment:3 Changed 6 years ago by Marcos Tadeu <marcos@…>

The easy way: put the connlimit in conntrack-extra packges. Patch in attach

Changed 6 years ago by Marcos Tadeu <marcos@…>

comment:4 Changed 6 years ago by Alexandre Ferarrese

remembering that the kernel must have support installed connlimit, if not, apply the patch:

  1. download patch-o-matic-ng snapshot from
  2. download iptables from ... similar place :-)
  3. download connlimit patch from .
  4. unpack connlimit: tar xzvf connlimit to unpacked patch-o-matic/patchlets/
  1. cd ../.. back to patch-o-matic top and configure by ./runme extra
  1. select connlimit option to Y


comment:5 Changed 6 years ago by crater0083

well,these two patch is too old,I can`t use them on recent svn trunk,any new patchs?

comment:6 Changed 4 years ago by anonymous

Any news for connlimit in Attitude Adjustment 12.09?

comment:7 Changed 4 years ago by anonymous

I also need patch for Attitude Adjustment 12.09. Anyone can help?

comment:8 Changed 4 years ago by danmakugato@…

guys, really needed that module - it's very vital to home users with restrictive providers

i'm know, you can do it, we all beleive in your skills

comment:9 Changed 4 years ago by leetminiwheat@…

this really needs to be in OpenWRT, both TomatoUSB and DD-WRT have it. Major distributions like Ubuntu and Debian ship with connlimit too. I don't see why this can't be included in extras or something.

comment:10 follow-up: Changed 4 years ago by anonymous

To enable connlimit option in kernel and iptables, apply this patch :

--- include/   2013-08-22 11:58:21.000000000 -0300
+++ include/        2013-08-22 12:01:08.000000000 -0300
@@ -72,6 +72,8 @@
 # conntrack-extra
+$(eval $(call nf_add,IPT_CONNTRACK_EXTRA,CONFIG_IP_NF_MATCH_CONNLIMIT, $(P_V4)ipt_connlimit))
 $(eval $(call nf_add,IPT_CONNTRACK_EXTRA,CONFIG_NETFILTER_XT_CONNMARK, $(P_XT)xt_connmark))

comment:11 Changed 4 years ago by anonymous

Is there a chance to see this (or similar, adding connlimit via a separate menuconfig option) change in the regular openwrt trunk ?

comment:12 in reply to: ↑ 10 Changed 4 years ago by zZk

how to apply this patch ? please describe here step by step

comment:13 Changed 4 years ago by cyrus

  • Resolution set to fixed
  • Status changed from new to closed

Fixed in r39878.

comment:14 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

as closed .
The resolution will be deleted. Next status will be 'reopened'.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.