Re: rate limit with pf instead of IPFW

2006-12-30 Thread Abdullah Al-Marrie
On 12/30/06, Peter N. M. Hansteen <[EMAIL PROTECTED]> wrote: "Abdullah Al-Marrie" <[EMAIL PROTECTED]> writes: > I checked http://home.nuug.no/~peter/pf/en/bruteforce.html > > I still didn't find something in the faq covers table > persist , do I need to create a file like /etc/bruteforce or no

Re: rate limit with pf instead of IPFW

2006-12-30 Thread Peter N. M. Hansteen
"Abdullah Al-Marrie" <[EMAIL PROTECTED]> writes: > I checked http://home.nuug.no/~peter/pf/en/bruteforce.html > > I still didn't find something in the faq covers table > persist , do I need to create a file like /etc/bruteforce or no need > for that and will be stored in kernel until they expire

Re: rate limit with pf instead of IPFW

2006-12-29 Thread Max Laier
On Friday 29 December 2006 12:05, Abdullah Al-Marrie wrote: > On 11/23/06, Max Laier <[EMAIL PROTECTED]> wrote: > > > On 11/23/06, Jon Simola <[EMAIL PROTECTED]> wrote: > > > > > Greetings BPF gurus! > > > > > > > > PF? bpf is different and has little to do with firewalling. > > > > > > > > > Could

Re: rate limit with pf instead of IPFW

2006-12-29 Thread Abdullah Al-Marrie
On 11/23/06, Max Laier <[EMAIL PROTECTED]> wrote: > On 11/23/06, Jon Simola <[EMAIL PROTECTED]> wrote: > > > Greetings BPF gurus! > > > > PF? bpf is different and has little to do with firewalling. > > > > > Could someone please give me full example to setup > > > limit {src-addr | src-port | dst

Re: rate limit with pf instead of IPFW

2006-11-25 Thread Ermal Luçi
Take a look at this option with the others hinted in the previous replies, quoted directly from the man page: max-src-conn-rate _number_ / _seconds_ Limit the rate of new connections over a time interval. The con- nection rate is an approximation calculated as a moving avera

Re: rate limit with pf instead of IPFW

2006-11-23 Thread Jon Simola
On 11/23/06, John Smith <[EMAIL PROTECTED]> wrote: > > Could someone please give me full example to setup > > limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW > > 01000 allow tcp from any to me setup limit src-addr 5 currently does Could you please post your pf.conf with the r

Re: rate limit with pf instead of IPFW

2006-11-23 Thread Max Laier
On Thursday 23 November 2006 20:01, John Smith wrote: > On 11/23/06, Jon Simola <[EMAIL PROTECTED]> wrote: > > On 11/23/06, John Smith <[EMAIL PROTECTED]> wrote: > > > Greetings BPF gurus! > > > > PF? bpf is different and has little to do with firewalling. > > > > > Could someone please give me ful

Re: rate limit with pf instead of IPFW

2006-11-23 Thread John Smith
On 11/23/06, Jon Simola <[EMAIL PROTECTED]> wrote: On 11/23/06, John Smith <[EMAIL PROTECTED]> wrote: > Greetings BPF gurus! PF? bpf is different and has little to do with firewalling. > Could someone please give me full example to setup > limit {src-addr | src-port | dst-addr | dst-port} to do

Re: rate limit with pf instead of IPFW

2006-11-23 Thread Jon Simola
On 11/23/06, John Smith <[EMAIL PROTECTED]> wrote: Greetings BPF gurus! PF? bpf is different and has little to do with firewalling. Could someone please give me full example to setup limit {src-addr | src-port | dst-addr | dst-port} to do what IPFW 01000 allow tcp from any to me setup limit s

rate limit with pf instead of IPFW

2006-11-23 Thread John Smith
Greetings BPF gurus! I have this rule in IPFW 01000 allow tcp from any to me setup limit src-addr 5 This rule as you know doesn't allow more than 5 connections per ip to connect to my server in same time. The problem with the IPFW, it doesn't allow me to set it with seconds, so what I need to