
pass proto tcp from any to any port { www https } \\
        flags S/SA keep state \\
        (max-src-conn 100, max-src-conn-rate 100/1, \\
        overload <bruteforce> flush global)
"

PF_CONF=/etc/pf.conf
echo "$pf_conf" | doas tee -a $PF_CONF >/dev/null