<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Read up on flowadm(1M) - this is a better tool for rate limiting.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">Dan<br><br>Sent from my iPhone (typos, autocorrect, and all)</div><div><br>On Apr 25, 2017, at 1:29 PM, Software Information <<a href="mailto:softwareinforjam@gmail.com">softwareinforjam@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">Hi All<div>I have been trying to find some ipfilter documentation that will show me how to rate limit to a particular port in OmniOS. I really want to rate limit users logging on using ssh to seriously discourage the brute forcers. I am more used to putting lines like this in pf.conf on a BSD.</div><div><br></div><div><p style="margin:0in;font-family:calibri;font-size:11pt">1. table
<abusive_ips> persist</p><p style="margin:0in;font-family:calibri;font-size:11pt"><br></p>
<p style="margin:0in;font-family:calibri;font-size:11pt">2. block in quick from
<abusive_ips></p><p style="margin:0in;font-family:calibri;font-size:11pt"><br></p></div><div>3. pass
in on $interface proto tcp to $interface port 53 flags S/SA keep state \</div><div> (max-src-conn-rate 15/5, overload <abusive_ips> flush)<br></div><div><br></div><div>Can anyone show me where some good docs are on how to accomplish this on Omni?</div><div><br></div><div>Regards</div><div><br></div></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>OmniOS-discuss mailing list</span><br><span><a href="mailto:OmniOS-discuss@lists.omniti.com">OmniOS-discuss@lists.omniti.com</a></span><br><span><a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss">http://lists.omniti.com/mailman/listinfo/omnios-discuss</a></span><br></div></blockquote></body></html>