Re: flood protect

[Matvey Gladkikh <matvey@users.sf.net>]

> Я правильно помню, что PF работает в userspace?

нет.

PF(4)                     OpenBSD Programmer's Manual                    PF(4)

NAME
     pf - packet filter

SYNOPSIS
     pseudo-device pf

DESCRIPTION
     Packet filtering takes place in the kernel.  A pseudo-device, /dev/pf,
     allows userland processes to control the behavior of the packet filter
     through an ioctl(2) interface.  There are commands to enable and disable
     the filter, load rulesets, add and remove individual rules or state table
     entries, and retrieve statistics.  The most commonly used functions are
     covered by pfctl(8)...
    
-- 
Matvey Gladkikh