1source limiter dns-server id 1 entries 2 limit 3 rate 4/5 inet mask 16 2pass in proto tcp from any to any port = domain flags S/SA keep state source limiter id 1 (block) 3