[FUG-BR] Limitando o número de conexões com o PF

[Luiz Gustavo S. Costa]

from # man pf.conf

STATEFUL TRACKING OPTIONS
     All three of keep state, modulate state and synproxy state support the
     following options:

     max <number>
           Limits the number of concurrent states the rule may create.  When
           this limit is reached, further packets matching the rule that
would
           create state are dropped, until existing states time out.
     no-sync
           Prevent state changes for states created by this rule from
appear-
           ing on the pfsync(4) interface.
     <timeout> <seconds>
           Changes the timeout values used for states created by this rule.
           For a list of all valid timeout names, see OPTIONS above.

     Multiple options can be specified, separated by commas:

           pass in proto tcp from any to any \
                 port www flags S/SA keep state \
                 (max 100, source-track rule, max-src-nodes 75, \
                 max-src-states 3, tcp.established 60, tcp.closing 5)


2008/4/8, Luís <fug460 em gmail.com>:
>
> Olá Lista,
>
> Queria limitar o número de conexões simultaneas com o pf mais procurei
> algumas coisas mais nada que me levasse ao caminho das pedras.
> Algué usa isso e se usa como poderia configurar aqui a regra e se
> realmente vale a pena fazer isso.
>
> Obrigado
>
>
> Luís
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>



-- 
Luiz Gustavo - BSD/Linux User
<=======\
<=======|=== www.luizgustavo.pro.br ===
<=======/
ICQ: 2890831 / MSN: gustavo.bsd em gmail.com