[webizen]

you should set connection limit to block the IP over the connection limit. request rate throttling does NOT block the IP over the limit BUT defer the serving.