From e6777ccb122aa570a4b59a9318dc1948f7419a34 Mon Sep 17 00:00:00 2001 From: Valentin Samir Date: Sat, 1 Dec 2012 02:37:20 +0100 Subject: [PATCH] =?UTF-8?q?[firewall=5Fnew]=20fucking=20limitation=20?= =?UTF-8?q?=C3=A0=203=20connexions=20ssh=20/=20min=20deuxi=C3=A8me=20?= =?UTF-8?q?=C3=A9dition?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Ignore-this: b89cfa9dd6329fc2f9d7a56b236beab9 darcs-hash:20121201013720-3a55a-e5178039494da4537ee718fe7bf14279c3d13246.gz --- gestion/gen_confs/firewall_new.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gestion/gen_confs/firewall_new.py b/gestion/gen_confs/firewall_new.py index aede470f..1f56d471 100755 --- a/gestion/gen_confs/firewall_new.py +++ b/gestion/gen_confs/firewall_new.py @@ -990,7 +990,7 @@ class firewall_komaz(firewall_crans) : print OK # Attention les règles sont à l'envers. Hint '-I' iptables("-I EXT_VERS_SERVEURS -p tcp --dport ssh -m state --state NEW\ - -m recent --name SSH --update --seconds 60 --hitcount 40 --rttl -j DROP") + -m recent --name SSH --update --seconds 30 --hitcount 10 --rttl -j DROP") iptables("-I EXT_VERS_SERVEURS -p tcp --dport ssh -m state --state NEW\ -m recent --name SSH --set")