Re: Way to find most active IPs for rate limiting with pf

2020-08-07 Thread Stuart Henderson
On 2020-08-06, Alan McKay wrote: > So I want to implement rate limiting, and to determine a reasonable > rate based on current traffic patterns I'd like to be able to figure > out which source IPs are generating the most connections and at what > rate. > > Is there a way to do that? Lots of ways

Re: Way to find most active IPs for rate limiting with pf

2020-08-06 Thread philippe aubry
Hi all May be that can help, something like this : pass in quick on $ext_if proto tcp from any to ($ext_if) port $tcp_services (max-src-conn 50, max-src-conn-rate 5/5, overload flush global) I use it to black list ip that do to many ssh or other tcp services simultaneous connections, but in your

Re: Way to find most active IPs for rate limiting with pf

2020-08-06 Thread Jordan Geoghegan
On 2020-08-06 13:46, Alan McKay wrote: So I want to implement rate limiting, and to determine a reasonable rate based on current traffic patterns I'd like to be able to figure out which source IPs are generating the most connections and at what rate. Is there a way to do that? There is li

Way to find most active IPs for rate limiting with pf

2020-08-06 Thread Alan McKay
So I want to implement rate limiting, and to determine a reasonable rate based on current traffic patterns I'd like to be able to figure out which source IPs are generating the most connections and at what rate. Is there a way to do that? -- "You should sit in nature for 20 minutes a day. Unle