limit hard { limit = ${hardLimit}; restart { restart = +M; } reach { exec = "/sbin/ipfw add ${hardRuleUp} deny ip from any to any"; exec = "/sbin/ipfw add ${hardRuleDown} reject ip from any to any"; } expire { expire = +M; exec = "/sbin/ipfw delete ${hardRuleUp}"; exec = "/sbin/ipfw delete ${hardRuleDown}"; } } limit soft { limit = ${softLimit}; restart { restart = +D; } reach { exec = "/sbin/ipfw add ${softRuleUp} queue 3 ip from any to any"; exec = "/sbin/ipfw add ${softRuleDown} queue 5 ip from any to any"; } expire { expire = +D; exec = "/sbin/ipfw delete ${softRuleUp}"; exec = "/sbin/ipfw delete ${softRuleDown}"; } }