Hi, pass in quick log proto tcp to (self) port 21 $SA_FLAGS (max-src-conn 75, max-src-conn-rate 75/5, overload <ftpconn_bruteforce> flush global)
Is it possible to find out/log which limit overloaded the rule? I want to adjust the correct limits and knowing which limit was hit would be very helpful. Thanks, Helmut