From owner-freebsd-ipfw@FreeBSD.ORG Wed Apr 30 15:31:10 2014 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F88B65B; Wed, 30 Apr 2014 15:31:10 +0000 (UTC) Received: from mail-ie0-x235.google.com (mail-ie0-x235.google.com [IPv6:2607:f8b0:4001:c03::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3105D1FDA; Wed, 30 Apr 2014 15:31:10 +0000 (UTC) Received: by mail-ie0-f181.google.com with SMTP id y20so2066448ier.40 for ; Wed, 30 Apr 2014 08:31:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=BQJgWdOLGobw0Ki7EUHZrJKBswcwgzee+t9FCav8Qc4=; b=vbbHowZOyeX53LhGWJ42ddvwruWnpX1jg2QcLQyrvaPriBGiheHYhf/EKmgFNP16JV RAMWc9DhE/w/zxOglk8wiLrMixGQl9rRTTz55NlrYhN/g/rlvqh4skpMQSh80E1q4bqB N4h1lR/tlIicaYrjZaPPhMYnzH6maWknIkxik08f6bglMNuc3qDwkAKgdLpRmebd6sow jJOgvRoRTZ2f359v7JDtV50nsfPa3I7Q8ZCxjv9Pcf4CmVhhTA+easndFUpdvgEOfmqt RH5dEijKxiRqc78Yyhf5SAkqINWwRcvBqZd8yC6Q/tXytrLY2t6we1MUEmf60aLkFCTE SB8A== X-Received: by 10.50.23.52 with SMTP id j20mr5551114igf.13.1398871867462; Wed, 30 Apr 2014 08:31:07 -0700 (PDT) Received: from [192.168.1.102] ([203.117.37.53]) by mx.google.com with ESMTPSA id fx1sm6777693igd.1.2014.04.30.08.31.04 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 30 Apr 2014 08:31:06 -0700 (PDT) Message-ID: <53611738.8010103@gmail.com> Date: Wed, 30 Apr 2014 23:31:04 +0800 From: bycn82 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0) Gecko/20120129 Thunderbird/10.0 MIME-Version: 1.0 To: Julian Elischer Subject: Re: feature of `packet per second` References: <5360F1F4.9060808@gmail.com> <5361105C.1040203@freebsd.org> In-Reply-To: <5361105C.1040203@freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: freebsd-ipfw@FreeBSD.org X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Apr 2014 15:31:10 -0000 On 4/30/14 23:01, Julian Elischer wrote: > On 4/30/14, 8:52 PM, bycn82 wrote: >> Hi >> >> `packet per second` it is easy to be implemented using iptables, >> there is a module named `recent`, but in using ipfw, Do we have any >> solution to fulfill it? check the link below >> https://forums.freebsd.org/viewtopic.php?f=44&t=42933&p=258441#p258441 > > since I don't use linux.. what is "packet per second"?.. does it > report it or set a limit on it? >> >> bycn82 >> >> _______________________________________________ >> freebsd-ipfw@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >> >> > > Yes, "Packets Per Second"means limit a connection based on the packets number, for example, If I allow 2 ICMP packets come to my server in each individual second. only the first 2 packets will be allow, all others in the same second will be dropped.