Date: Thu, 23 Nov 2006 20:13:35 +0100 From: Max Laier <max@love2party.net> To: freebsd-pf@freebsd.org Subject: Re: rate limit with pf instead of IPFW Message-ID: <200611232013.41558.max@love2party.net> In-Reply-To: <499c70c0611231101k68429053l40ec68712ca66263@mail.gmail.com> References: <499c70c0611231047k84747frf91def08d509cba6@mail.gmail.com> <8eea04080611231059x6e229d09lfd3f25965511d7ee@mail.gmail.com> <499c70c0611231101k68429053l40ec68712ca66263@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Thursday 23 November 2006 20:01, John Smith wrote:
> On 11/23/06, Jon Simola <jsimola@gmail.com> wrote:
> > On 11/23/06, John Smith <almarrie@gmail.com> wrote:
> > > Greetings BPF gurus!
> >
> > PF? bpf is different and has little to do with firewalling.
> >
> > > Could someone please give me full example to setup
> > > limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW
> > > 01000 allow tcp from any to me setup limit src-addr 5 currently
> > > does
> >
> > I use something like this:
> >
> > pass in on $ext_if proto tcp from any to $ext_if port smtp flags S/SA
> > keep state (source-track rule, mac-src-states 5)
> >
> > --
>
> Greetings Jon,
>
> Could you please post your pf.conf with the rules so I can use it as a
> guide?
If you are looking for a guide - I suggest reading the pf-faq on the
OpenBSD site or Peter's great tutorial, available from:
http://home.nuug.no/~peter/pf/ The topic in question, is discussed here:
http://home.nuug.no/~peter/pf/en/bruteforce.html
--
/"\ Best regards, | mlaier@freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier@EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)
iD8DBQBFZfLlXyyEoT62BG0RArNAAJ9I0z4VGKkxdMb5uvXKtNp18v0ePwCfUCXA
DuAWhaoOYVeS4HImF/V1rd0=
=GEvG
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200611232013.41558.max>