I have seen and implemented the following from this forum:
add chain=ICMP comment=“Echo request - Avoiding Ping Flood” icmp-options=8:0 limit=1,5 protocol=icmp
What does limit 1,5 do? The 1 implements a 1 packet per second rate limit but what does the 5 (shows in the bust field in WinBox) mean ?
I cannot find a document explaining this simple setup.
Help would be appreciated?
Hi! According to http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter there are 3 params:
count - maximum average packet rate measured in packets per time interval
time - specifies the time interval in which the packet rate is measured (optional, 1s will be used if not specified)
burst - number of packets which are not counted by packet rate
So, limit 1,5 IMHO means 1 packet over 5 seconds.