Firewall feature like iptables -m recent
-
I am not sure if there is some hidden functionality already in place but with all of the DDoS attacks out there I thought maybe this would be a good feature for the future.
iptables has a -m recent module to control connections from IPs based on a time period. So if a source makes too many requests within a period it will block them. Quite useful in resource exhaustion type attacks/DDoS.
Just a thought.
-
If you look in the rule properties in the Advanced feature -> Advanced options section, I think you will find what you are looking for.
-
If you look in the rule properties in the Advanced feature -> Advanced options section, I think you will find what you are looking for.
Thanks a bunch podilarius. Been busy lately but I sure miss these forums and trying to help out when I can. Between the creators of pfSense and people like you supporting it, sure makes a great system.