Need help with pf

[notooth]

Hi everyone,

In an effort to prevent a DoS attack to my web server, I am trying to set the maximum 1 request per 2 seconds to each client in pf.conf:

pass in on egress proto tcp from any to (egress) port { 80 443 } keep state (max-src-conn-rate 1/2)

But when I tried to send about 10 requests to my web server in 2 seconds, the pf passed all to my web server. Can anyone tell me if there is something wrong with the configuration?