Obama did promise Putin a return gift of cyberware actions, so who knows.The few IP i bother to manually look up all came from North east US.
What I do know, it that following the input from this friendly forum, i added this to my pf.conf
Code:
pass in on egress proto tcp to $web_server port www keep state \
(max 200, source-track rule, max-src-nodes 100, \
max-src-states 3)
And php-fpm-7.0 is back to 0 load, as 0 content site should approximately have.
I understand better the author of the Absolute OpenBSD book, it a nasty world/net out there arm your self. And keenly remember all the fun jokes/stories from admin life in the front-line battlefield. I do hope he will update it.