From owner-freebsd-net@FreeBSD.ORG Fri Nov 11 01:03:03 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 939551065674 for ; Fri, 11 Nov 2011 01:03:03 +0000 (UTC) (envelope-from vijju.singh@gmail.com) Received: from mail-vw0-f54.google.com (mail-vw0-f54.google.com [209.85.212.54]) by mx1.freebsd.org (Postfix) with ESMTP id 524248FC16 for ; Fri, 11 Nov 2011 01:03:03 +0000 (UTC) Received: by vws11 with SMTP id 11so4364699vws.13 for ; Thu, 10 Nov 2011 17:03:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=LSdiCj36VmrXHg6jI9z9zp5qpAdaIHDRFHv697qWlaw=; b=dmtuKfuQEXdWRq08NHVi+FQA11QP8fo653tPMP/cfWz+/KODtBnKHBtKCJjPZHUy3o 0m6ymQEH8bIytWJ5wQwd+J7jfFUN9NohyKTWiSaijoPlKl2G0b8LZQ8I8dmoa/J4tP5X ktJnLM8x4pLwrDbYW4CewuUDaN5YkYH3NvPn0= MIME-Version: 1.0 Received: by 10.52.20.207 with SMTP id p15mr16732791vde.87.1320971736783; Thu, 10 Nov 2011 16:35:36 -0800 (PST) Received: by 10.220.191.130 with HTTP; Thu, 10 Nov 2011 16:35:36 -0800 (PST) Date: Thu, 10 Nov 2011 16:35:36 -0800 Message-ID: From: Vijay Singh To: freebsd-net@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: ipf(8) for TCP connection rate limiting X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Nov 2011 01:03:03 -0000 Hi. My machine has some ipf(8) rules and I see that when there is a TCP connection storm to the http port the filer sends out TCP resets. I wanted to know if its possible to configure the pps limit for TCP connections before the RSTs kick in using ipf. regards, vijay