1e28dfd6bSKristof Provostsource limiter dns-server id 1 entries 2 limit 3 rate 4/5 inet mask 16 2*2e0e45a5SKristof Provostpass in proto tcp from any to any port = domain flags S/SA keep state source limiter id 1 (block) 3