Limit TCP connection with IPTables/csf

CSF is easily tweakable, check out this :

That's an easy way to limit TCP connection, isn't it ?