1state limiter "dns-server" id 1 limit 1000 rate 1/10 2pass in proto tcp to port domain state limiter "dns-server" (no-match) 3