/etc/pf.conf
table <bruteforce> persist
block quick from <bruteforce>
pass inet proto tcp from any to $int_if:network port $tcp_services \
flags S/SA keep state \
(max-src-conn 100, max-src-conn-rate 15/5, \
overload <bruteforce> flush global)max-src-conn: antall forbindelser fra en maskin
max-src-conn-rate: takt for nye forbindelser: 15 per 5 sekunder
overload <bruteforce>: går du over, havner du i tabellen vi blokkerer
flush global : kutt alle forbindelser