Date: Wed, 25 Jun 2025 20:04:41 GMT From: Kristof Provost <kp@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: git: eb01c0dfe275 - main - pf.conf.5: tweak max-pkt-rate Message-ID: <202506252004.55PK4fjJ080598@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=eb01c0dfe27572247c64979f26d01ac11d3ff1bb commit eb01c0dfe27572247c64979f26d01ac11d3ff1bb Author: Kristof Provost <kp@FreeBSD.org> AuthorDate: 2025-06-17 09:19:16 +0000 Commit: Kristof Provost <kp@FreeBSD.org> CommitDate: 2025-06-25 20:04:15 +0000 pf.conf.5: tweak max-pkt-rate Obtained from: OpenBSD, jmc <jmc@openbsd.org>, fbac9b3f44 Sponsored by: Rubicon Communications, LLC ("Netgate") --- share/man/man5/pf.conf.5 | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 010096369c83..3bdba4958aea 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -2221,15 +2221,14 @@ Measure the rate of packets matching the rule and states created by it. When the specified rate is exceeded, the rule stops matching. Only packets in the direction in which the state was created are considered, so that typically requests are counted and replies are not. -For example: -.Pp -.Bd -literal -offset indent -compact +For example, +to pass up to 100 ICMP packets per 10 seconds: +.Bd -literal -offset indent block in proto icmp pass in proto icmp max-pkt-rate 100/10 .Ed .Pp -passes up to 100 icmp packets per 10 seconds. -When the rate is exceeded, all icmp is blocked until the rate falls below +When the rate is exceeded, all ICMP is blocked until the rate falls below 100 per 10 seconds again. .Pp .It Xo Ar queue Aq Ar queue
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202506252004.55PK4fjJ080598>