rate limit with pf instead of IPFW

[Max Laier]

On Thursday 23 November 2006 20:01, John Smith wrote:
> On 11/23/06, Jon Simola <jsimola at gmail.com> wrote:
> > On 11/23/06, John Smith <almarrie at gmail.com> wrote:
> > > Greetings BPF gurus!
> >
> > PF? bpf is different and has little to do with firewalling.
> >
> > > Could someone please give me full example to setup
> > > limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW
> > > 01000 allow tcp from any to me setup limit src-addr 5 currently
> > > does
> >
> > I use something like this:
> >
> > pass in on $ext_if proto tcp from any to $ext_if port smtp flags S/SA
> > keep state (source-track rule, mac-src-states 5)
> >
> > --
>
> Greetings Jon,
>
> Could you please post your pf.conf with the rules so I can use it as a
> guide?

If you are looking for a guide - I suggest reading the pf-faq on the 
OpenBSD site or Peter's great tutorial, available from: 
http://home.nuug.no/~peter/pf/  The topic in question, is discussed here: 
http://home.nuug.no/~peter/pf/en/bruteforce.html

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20061123/a6f7f95b/attachment.pgp