rst 5 the description: Is established the maximum value of number burst limit for criterion limit. This number increases by one if it is obtained the packet, which falls under for the action of this rule, and in this case the average speed (given by key it -.limit) of entering packets is already achieved. So it occurs until number burst limit reaches the maximum value, established by key it -.limit-burst. The rule begins to pass packets with the speed, given by key it -.limit after this. Value to on- silence is taken as the equal to 5. For the demonstration of the principles of the operation of this criterion I wrote scenario Limit-match.txt with the aid of this scenario you you will see as it works criterion limit, simply sending ping- packets with different time intervals.6.4.3.2. Criterion MAC MAC (Ethernet Media Access Control) criterion is used for checking the initial MAC- address of packet. Expansion -.m mac, today, allows sole criterion, but possibly in the future it will be extended and it will become more it is useful. THE NOTE: The modulus of expansion must podgruzhat’sya clearly by key -.m mac. I mention 4 about this because many, after forgetting to indicate this key, be surprised, why this criterion does not work.tab