limit

Description

Specifies the number of packets to be accepted within a given time frame under the criteria specified by the rule. Used in conjunction with burst.

Synopsis

{block | pass} {in | out} limit limit_value /unit burst burst_value {to | from} address_scope

limit_value is the maximum number of packets to be accepted within the specified period of time (unit ).

unit is second (s), minute (m), hour (h), or day (d).

burst_value is the absolute number of packets to be accepted under the criteria specified by the rule.

address_scope can be a unique IP address, an address space, or the keywords !, all, me, or any.