You would like to use max-src-states. According to pf.conf(5):
max-src-states
Limits the maximum number of simultaneous state entries
that a single source address can create with this rule.
For a list of all valid timeout names, see OPTIONS
above.
Regards
Petr R.
Wolfgang Pichler [EMAIL PROTECTED] wrote:
> hi all,
>
> an hour ago i was hit by a sort of dos attack (someone sent nearly
> 200000 mails to our mail addresses in the form of [EMAIL PROTECTED]).
> I've now googled around to see if its possible to limit the number of
> connections from one ip with pf - but havn't found something useful.
>
> Can someone please point me to the right direction ?
>
> Thanks
>
> regards,
> Wolfgang
>
