Date: Thu, 23 Nov 2006 22:01:10 +0300 From: "John Smith" <almarrie@gmail.com> To: "Jon Simola" <jsimola@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: rate limit with pf instead of IPFW Message-ID: <499c70c0611231101k68429053l40ec68712ca66263@mail.gmail.com> In-Reply-To: <8eea04080611231059x6e229d09lfd3f25965511d7ee@mail.gmail.com> References: <499c70c0611231047k84747frf91def08d509cba6@mail.gmail.com> <8eea04080611231059x6e229d09lfd3f25965511d7ee@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 11/23/06, Jon Simola <jsimola@gmail.com> wrote:
> On 11/23/06, John Smith <almarrie@gmail.com> wrote:
> > Greetings BPF gurus!
>
> PF? bpf is different and has little to do with firewalling.
>
> > Could someone please give me full example to setup
> > limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW
> > 01000 allow tcp from any to me setup limit src-addr 5 currently does
>
> I use something like this:
>
> pass in on $ext_if proto tcp from any to $ext_if port smtp flags S/SA
> keep state (source-track rule, mac-src-states 5)
>
> --
Greetings Jon,
Could you please post your pf.conf with the rules so I can use it as a guide?
Thank you,
-J
> Jon
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?499c70c0611231101k68429053l40ec68712ca66263>