diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2025-06-03 07:15:21 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2025-06-25 17:56:23 +0000 |
| commit | ff11f1c8c76c053b442f1f1df97272939fbf5afc (patch) | |
| tree | 5f673835826467ca5b7752fe23e50a7a88fb6dac /gnu | |
| parent | 53a341d0e445269590dcb32f8c8320c3459a21c4 (diff) | |
pf: add a generic packet rate matching filter
allows things like
pass in proto icmp max-pkt-rate 100/10
all packets matching the rule in the direction the state was created are
taken into consideration (typically: requests, but not replies).
Just like with the other max-*, the rule stops matching if the maximum is
reached, so in typical scenarios the default block rule would kick in then.
with input from Holger Mikolon
ok mikeb
Obtained from: OpenBSD, henning <henning@openbsd.org>, 5a4ae9a9cb
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D50798
Diffstat (limited to 'gnu')
0 files changed, 0 insertions, 0 deletions