dstlimit remplac par hashlimit, il faut encore vrifier que srcip-dstip

fonctionne encore.

darcs-hash:20050129155225-1d643-14393008092feddd36c46b3008d25a04efa339ff.gz
This commit is contained in:
sabban 2005-01-29 16:52:25 +01:00
parent ea8193a663
commit 79c8788459

View file

@ -92,7 +92,7 @@ class firewall_komaz :
limit = " -m limit --limit 10/s --limit-burst 10 "
log_template = '-m limit --limit 1/s --limit-burst 1 -j LOG --log-level notice --log-prefix '
filtre_flood = '-m dstlimit --dstlimit 20 --dstlimit-mode srcip-dstip --dstlimit-name flood'
filtre_flood = '-m hashlimit --hashlimit 20 --hashlimit-mode srcip-dstip --hashlimit-name flood'
liste_reseaux_non_routables = [ '1.0.0.0/8','2.0.0.0/8','5.0.0.0/8','7.0.0.0/8',\
'10.0.0.0/8','14.0.0.0/8','23.0.0.0/8','27.0.0.0/8','31.0.0.0/8','36.0.0.0/8',\