Changement de mode de détection des floods

darcs-hash:20050525184403-41617-491998353b810a7661cfdcf89a03619aeacac8a6.gz
This commit is contained in:
pauget 2005-05-25 20:44:03 +02:00
parent 5118be2c14
commit 9410f29686

View file

@ -81,7 +81,7 @@ class firewall_crans :
limit = " -m limit --limit 10/s --limit-burst 10 " limit = " -m limit --limit 10/s --limit-burst 10 "
log_template = '-m limit --limit 1/s --limit-burst 1 -j LOG --log-level notice --log-prefix ' log_template = '-m limit --limit 1/s --limit-burst 1 -j LOG --log-level notice --log-prefix '
filtre_flood = '-m hashlimit --hashlimit 20 --hashlimit-mode srcip,dstip --hashlimit-name flood' filtre_flood = '-m hashlimit --hashlimit 20 --hashlimit-mode srcip --hashlimit-name flood'
liste_reseaux_non_routables = [ '10.0.0.0/8', '172.16.0.0/12', liste_reseaux_non_routables = [ '10.0.0.0/8', '172.16.0.0/12',
'169.254.0.0/16', '192.168.0.0/16' , '224.0.0.0/4' ] '169.254.0.0/16', '192.168.0.0/16' , '224.0.0.0/4' ]