[firewall] blackliste flood sur le triplet (srcip,dstip,dstport)

darcs-hash:20101022230405-ffbb2-20d9df0fe510e90cef68a0b8b486db7da77a3b09.gz
This commit is contained in:
Nicolas Dandrimont 2010-10-23 01:04:05 +02:00
parent 3dac6eebf5
commit 7c2eeca43c

View file

@ -113,7 +113,7 @@ class firewall_crans :
limit = " -m limit --limit 10/s --limit-burst 10 "
log_template = '-m limit --limit 1/s --limit-burst 1 -j LOG --log-level notice --log-prefix '
filtre_flood = '-m hashlimit --hashlimit 20 --hashlimit-mode srcip --hashlimit-name flood'
filtre_flood = '-m hashlimit --hashlimit 20/second --hashlimit-mode srcip,dstip,dstport --hashlimit-name flood'
machines = []
debug = 1