|
Server : Apache/2.4.62 System : FreeBSD fbsdweb2.web.rcn.net 14.1-RELEASE FreeBSD 14.1-RELEASE releng/14.1-n267679-10e31f0946d8 GENERIC amd64 User : www ( 80) PHP Version : 8.3.8 Disable Function : NONE Directory : /domains/highlandlabs/cqi-bin/ALFA_DATA/alfasymlink/root/usr/tests/sbin/pfctl/files/ |
Upload File : |
# TCP connection tracking
table <bad> persist
block all
block quick from <bad>
pass out proto tcp flags S/SA keep state
pass out proto { icmp, udp } keep state
pass in on lo1000001 proto tcp to 10.0.0.1 port 22 flags S/SA \
keep state (max-src-conn 10, max-src-conn-rate 3/99)
pass in on lo1000001 proto tcp to 10.0.0.2 port 22 flags S/SA keep state \
(max-src-conn 10)
pass in on lo1000001 proto tcp to 10.0.0.3 port 22 flags S/SA keep state \
(max-src-conn-rate 3/99)
pass in on lo1000000 proto tcp to 10.0.0.1 port 80 flags S/SA modulate state \
(max-src-conn 100, max-src-conn-rate 10/5, overload <bad> flush)
pass in on lo1000000 proto tcp to 10.0.0.1 port 8080 flags S/SA synproxy state \
(max-src-conn 1000, max-src-conn-rate 1000/5, overload <bad> \
flush global)