RedXen/aports
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Relax ratelimits further

Browse Source
This commit is contained in:
Alex D. 2022-06-07 07:27:17 +00:00
parent a3b46330e2
commit 170fc79261
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/nftables/APKBUILD
View File

@ -3,7 +3,7 @@
. ../APKBUILD-config.template
pkgver=2022.05.28.02
pkgver=2022.06.07.01
pkgrel=0
options="!check" # check requires root?

8
config/nftables/nft/inet/redxenfirewall/filter/input/stateful/base
View File

@ -1,6 +1,6 @@
# Ban if connection attempts are still made over the limit
ct state new meter ban4 { ip saddr timeout 1h limit rate over 1/second burst 10 packets } update @blackhole4 { ip saddr timeout 1h } counter;
ct state new meter ban6 { ip6 saddr timeout 1h limit rate over 1/second burst 10 packets } update @blackhole6 { ip6 saddr timeout 1h } counter;
ct state new meter ban4 { ip saddr timeout 10m limit rate over 1/second burst 50 packets } update @blackhole4 { ip saddr timeout 1h } counter;
ct state new meter ban6 { ip6 saddr timeout 10m limit rate over 1/second burst 50 packets } update @blackhole6 { ip6 saddr timeout 1h } counter;
ct state new meter drop4 { ip saddr timeout 5m limit rate over 1/second } counter reject;
ct state new meter drop6 { ip6 saddr timeout 5m limit rate over 1/second } counter reject;
ct state new meter drop4 { ip saddr timeout 10m limit rate over 1/second } counter reject;
ct state new meter drop6 { ip6 saddr timeout 10m limit rate over 1/second } counter reject;