From owner-freebsd-pf@FreeBSD.ORG Sat Nov 25 18:23:53 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3481D16A403 for ; Sat, 25 Nov 2006 18:23:53 +0000 (UTC) (envelope-from ermal.luci@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.181]) by mx1.FreeBSD.org (Postfix) with ESMTP id A04E043D49 for ; Sat, 25 Nov 2006 18:23:03 +0000 (GMT) (envelope-from ermal.luci@gmail.com) Received: by py-out-1112.google.com with SMTP id f31so729010pyh for ; Sat, 25 Nov 2006 10:23:51 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=knHYHBPP8yPtSYxuMf2w9UzRmBnSVMy3UGxt1PSRukKSPB4LnOYpqXy89I4s//b8ovJhFJXUxipaVHBGGigUF7i3y2T8mTGfkg5IYkxoP+S/IujPlTl2noUf+/82MoBsfuumGs5Db8TqNbCTwRwSp4n4x0WQ+zHqoc4HFiNm77s= Received: by 10.35.41.14 with SMTP id t14mr8812557pyj.1164479031474; Sat, 25 Nov 2006 10:23:51 -0800 (PST) Received: by 10.35.126.6 with HTTP; Sat, 25 Nov 2006 10:23:51 -0800 (PST) Message-ID: <9a542da30611251023w22cf70tc0e184f26480ae41@mail.gmail.com> Date: Sat, 25 Nov 2006 19:23:51 +0100 From: "=?ISO-8859-1?Q?Ermal_Lu=E7i?=" To: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: Re: rate limit with pf instead of IPFW X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Nov 2006 18:23:53 -0000 Take a look at this option with the others hinted in the previous replies, quoted directly from the man page: max-src-conn-rate _number_ / _seconds_ Limit the rate of new connections over a time interval. The con- nection rate is an approximation calculated as a moving average.