TIL The FreeBSD kernel auto-tarpits (for want of a better word) portscans on your host as soon as they attempt to connect to a closed port. If you see the following in your logs, that’s what’s happening.
"kernel: Limiting closed port RST response from 3877 to 190 packets/sec”
Shodan - looking at you!
You can have more fun using blackhole in sysctl
https://man.freebsd.org/cgi/man.cgi?query=blackhole&sektion=4&manpath=freebsd-release-ports
None of this is a substitute for a firewall.



