====== Limiting closed port RST response ======



FreeBSD’s kernel is that it will limit closed port RST responses, \\
It means someone repeatedly hitting a port that is closed, the kernel stop responding to all of the requests.

You generally get something like this in the system log:

<code bash>
kernel: Limiting closed port RST response from 379 to 200 packets per second
kernel: Limiting icmp unreach response from 112969 to 200 packets per second
</code>

This log might be help full to log in security scanner but not in general case.
You can Disable by just adding the following lines

<code bash | /etc/sysctl.conf>
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
</code>