bsd iftables

[longju2 0]

hello guys, i try enable my iftables on my server and i create rules, but i don`t understand what is this:

 

max-src-conn 30, max-src-conn-rate 20/5

 

how can explain, thanks.

[Rumor 2577]

hello guys, i try enable my iftables on my server and i create rules, but i don`t understand what is this:

 

max-src-conn 30, max-src-conn-rate 20/5

 

how can explain, thanks.

 

max-src-conn is the limit of TCP connections at once.

max-src-conn-rate is a limit of new connections per amount of time in seconds.

[Shogun 4530]

I think you mean pf not iptables. Those lines specify a maximum number of connections a single IP can establish with the server, and a maximum rate at which connections can be established (20 every 5 seconds). When this limit is reached connections can be dropped and / or the offending IP (source) banned.

[longju2 0]

Thanks