在bsd下如果设置对同一IP地址一定时间连接频率限制？

Reinstall

set timeout src.track 60

pass in quick on fxp0 proto tcp from any to fxp0 port = 80 flags S/SA keep state (source-track, max-src-states 200)

执行结果是
Rules must be in order: options, normalization, queueing, translation, filtering
pfctl: Syntax error in config file: pf rules not loaded

指set timeout src.track 60 有错
楼上是用Openbsd还是FreeBSD

Reinstall

set timeout src.track 60

pass in quick on fxp0 proto tcp from any to fxp0 port = 80 flags S/SA keep state (source-track, max-src-states 200)

好象指set timeout src.track 60 有错

是用OpenBSD还是FreeBSD

medlin2008

使用ipfw可以
ipfw add allow tcp from any to me setup limit src-addr 8
之后重启apache

startdd

http://archives.neohapsis.com/archives/openbsd/2004-12/0656.html

pass in proto tcp from any to any port = www flags S/SA keep state \
(max 10000,  max-src-conn 100,
max-src-conn-rate 30/5, \
adaptive.start 6000, adaptive.end 12000, \
tcp.first 15, tcp.opening 5, tcp.established 3600,
tcp.closing 30)

Reinstall

#pfctl -nf /etc/pf.conf
/etc/pf.conf:21: illegal timeout name max-src-conn

这是什么意思？顺便说一下，用的是FreeBSD5.3

linuxunix1

关注中！

lhming

这个是pf的版本低不支持这个，升级pf试试。

dingjeff

max-src-conn _number_/_second_
同一IP地址在指定时间内_second_内只能完成三次握手的连接数_number_

可以man 5 pf.conf
或在www.openbsd.org/man.cgi中输入pf.conf查看详细说明。

login8449

这贴好像没有结果？