upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-25 16:39:40 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

pf.conf.5: tweak max-pkt-rate

Browse source 
Obtained from:	OpenBSD, jmc <jmc@openbsd.org>, fbac9b3f44
Sponsored by:	Rubicon Communications, LLC ("Netgate")
This commit is contained in:
Kristof Provost 2025-06-17 11:19:16 +02:00
parent c5f2102377
commit eb01c0dfe2
1 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
share/man/man5/pf.conf.5
View file

@ -2221,15 +2221,14 @@ Measure the rate of packets matching the rule and states created by it.
When the specified rate is exceeded, the rule stops matching.
Only packets in the direction in which the state was created are considered,
so that typically requests are counted and replies are not.
For example:
.Pp
.Bd -literal -offset indent -compact
For example,
to pass up to 100 ICMP packets per 10 seconds:
.Bd -literal -offset indent
block in proto icmp
pass in proto icmp max-pkt-rate 100/10
.Ed
.Pp
passes up to 100 icmp packets per 10 seconds.
When the rate is exceeded, all icmp is blocked until the rate falls below
When the rate is exceeded, all ICMP is blocked until the rate falls below
100 per 10 seconds again.
.Pp
.It Xo Ar queue Aq Ar queue