pf to block against DDoS?

[Oliver Peter]

On Thu, Sep 04, 2008 at 09:23:09PM +0200, Redd Vinylene wrote:
> Hello hello!
> 
> I was quite shocked today when I heard I could use pf to block against DDoS
> attacks, using Stateful Tracking Options,
> http://www.openbsd.org/faq/pf/filter.html#stateopts.
> 
> But does anybody have any nice setups of this they'd want to share?
> 
> Much obliged, and thanks.

... nice cross-post.

I can recommend reading through this as well:
  http://www.bgnett.no/~peter/pf/en/bruteforce.html

-- 
Oliver PETER, email: oliver at peter.de.com, ICQ# 113969174
"If it feels good, you're doing something wrong."
                                      -- Coach McTavish