mirror of
https://github.com/opnsense/src.git
synced 2026-06-24 16:09:24 -04:00
ff11f1c8c7
allows things like
pass in proto icmp max-pkt-rate 100/10
all packets matching the rule in the direction the state was created are
taken into consideration (typically: requests, but not replies).
Just like with the other max-*, the rule stops matching if the maximum is
reached, so in typical scenarios the default block rule would kick in then.
with input from Holger Mikolon
ok mikeb
Obtained from: OpenBSD, henning <henning@openbsd.org>, 5a4ae9a9cb
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D50798
|
||
|---|---|---|
| .. | ||
| libpfctl.c | ||
| libpfctl.h | ||
| Makefile | ||
| Makefile.depend | ||