Date: Thu, 23 Nov 2006 10:59:20 -0800 From: "Jon Simola" <jsimola@gmail.com> To: "John Smith" <almarrie@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: rate limit with pf instead of IPFW Message-ID: <8eea04080611231059x6e229d09lfd3f25965511d7ee@mail.gmail.com> In-Reply-To: <499c70c0611231047k84747frf91def08d509cba6@mail.gmail.com> References: <499c70c0611231047k84747frf91def08d509cba6@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 11/23/06, John Smith <almarrie@gmail.com> wrote:
> Greetings BPF gurus!
PF? bpf is different and has little to do with firewalling.
> Could someone please give me full example to setup
> limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW
> 01000 allow tcp from any to me setup limit src-addr 5 currently does
I use something like this:
pass in on $ext_if proto tcp from any to $ext_if port smtp flags S/SA
keep state (source-track rule, mac-src-states 5)
--
Jon
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8eea04080611231059x6e229d09lfd3f25965511d7ee>