Limit applied per rule

source-track rule

Applied globally

source-track global

Number of distinct hosts allowed to have state

max-src-nodes

Maximum number of states per host

max-src-states