Any IP address sending packets with FIN flags set, but without SYN, RST, PSH, ACK, or URG flags is added to the finrstlim list.

Any IP address sending packets with RST flags set, but without FIN, SYN, PSH, ACK, or URG flags is added to the finrstlim list.

For any IP address in the finrstlim list that sends ten packets in one second, drop the packet.