Looks like I can do ipv4 mss limiting with pf. The bloom.host docs say this only applies to port 80, but I'm doing 443 as well to be sure.
scrub out on bridge0 proto tcp from any port {80,443} to any max-mss 1436
I think Bloom's only worried about web DDOS and ignoring other DDOS. Then again, I pay for bandwidth overages, so I guess that's not their problem?
Like Mucas :pumpkin_ugh:
npub1je…0c34g
2025-11-05 17:40:48 UTC
in reply to nevent1q…qek0
Author Public Key
npub1je7x7wacp8f6u7gns9gra3cdpkn20mrnvmurklqydeedpgr536vqq0c34gSeen on
wss://relay.ditto.pubPublished at
2025-11-05 17:40:48 UTCEvent JSON
{
"id": "4c8579304762ad295cc4df7a5a1f9253d331b87418c852887990a9105e1176c6",
"pubkey": "967c6f3bb809d3ae791381503ec70d0da6a7ec7366f83b7c046e72d0a0748e98",
"created_at": 1762364448,
"kind": 1,
"tags": [
[
"e",
"86a19f80c91064fc79d3c8386deee73d219087941d538ab8412836016e5a1944",
"wss://relay.ditto.pub/",
"reply"
],
[
"proxy",
"https://io.mwl.io/users/mwl/statuses/115498316512692794",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "Looks like I can do ipv4 mss limiting with pf. The bloom.host docs say this only applies to port 80, but I'm doing 443 as well to be sure. \n\nscrub out on bridge0 proto tcp from any port {80,443} to any max-mss 1436\n\nI think Bloom's only worried about web DDOS and ignoring other DDOS. Then again, I pay for bandwidth overages, so I guess that's not their problem?",
"sig": "e2283d58bc60048f69a7e1a49a86ade0adc48bc446f7ce24885806545b64bf7a27f92f42c0c8b9114cbce45260a5eac1c064576631f7eddff803537abc3cdafd"
}