Fighting DDOS attacks with pf

J David j.david.lists at gmail.com
Tue Aug 21 18:21:47 UTC 2012


On Tue, Aug 21, 2012 at 4:24 AM, Daniel Hartmeier <daniel at benzedrine.cx> wrote:
> Why not use synproxy state?

synproxy state does not help us limit simultaneous connections to a
particular destination IP, which is all we are trying to accomplish,
for a very large number of destination IPs.

Thanks.


More information about the freebsd-pf mailing list