`<div dir="ltr"><div>I could be wrong, but I think flowadm can control only the priority and max bandwidth for the traffic, not </div><div>the connection rate.</div><div><br></div><div>-Brad</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 25, 2017 at 10:41 AM, Dan McDonald <span dir="ltr"><<a href="mailto:danmcd@omniti.com" target="_blank">danmcd@omniti.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><div>Read up on flowadm(1M) - this is a better tool for rate limiting.</div><div id="m_-7472066825542549271AppleMailSignature"><br></div><div id="m_-7472066825542549271AppleMailSignature">Dan<br><br>Sent from my iPhone (typos, autocorrect, and all)</div><div><br>On Apr 25, 2017, at 1:29 PM, Software Information <<a href="mailto:softwareinforjam@gmail.com" target="_blank">softwareinforjam@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">Hi All<div>I have been trying to find some ipfilter documentation that will show me how to rate limit to a particular port in OmniOS. I really want to rate limit users logging on using ssh to seriously discourage the brute forcers. I am more used to putting lines like this in pf.conf on a BSD.</div><div><br></div><div><p style="margin:0in;font-family:calibri;font-size:11pt">1. table
<abusive_ips> persist</p><p style="margin:0in;font-family:calibri;font-size:11pt"><br></p>
<p style="margin:0in;font-family:calibri;font-size:11pt">2. block in quick from
<abusive_ips></p><p style="margin:0in;font-family:calibri;font-size:11pt"><br></p></div><div>3. pass
in on $interface proto tcp to $interface port 53 flags S/SA keep state \</div><div> (max-src-conn-rate 15/5, overload <abusive_ips> flush)<br></div><div><br></div><div>Can anyone show me where some good docs are on how to accomplish this on Omni?</div><div><br></div><div>Regards</div><div><br></div></div>
</div></blockquote><blockquote type="cite"><div><span>______________________________<wbr>_________________</span><br><span>OmniOS-discuss mailing list</span><br><span><a href="mailto:OmniOS-discuss@lists.omniti.com" target="_blank">OmniOS-discuss@lists.omniti.<wbr>com</a></span><br><span><a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss" target="_blank">http://lists.omniti.com/<wbr>mailman/listinfo/omnios-<wbr>discuss</a></span><br></div></blockquote></div><br>______________________________<wbr>_________________<br>
OmniOS-discuss mailing list<br>
<a href="mailto:OmniOS-discuss@lists.omniti.com">OmniOS-discuss@lists.omniti.<wbr>com</a><br>
<a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss" target="_blank" rel="noreferrer">http://lists.omniti.com/<wbr>mailman/listinfo/omnios-<wbr>discuss</a><br>
<br></blockquote></div><br></div>
`