RedXen
/
aports
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add timeouts for mail as well

This commit is contained in:
Alex D. 2022-04-03 18:52:30 +00:00
parent a19423010d
commit f958cb11ec
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/nftables/APKBUILD
View File

@ -3,7 +3,7 @@
. ../APKBUILD-config.template
pkgver=2022.04.03.01
pkgver=2022.04.03.02
pkgrel=0
options="!check" # check requires root?

4
config/nftables/nft/inet/redxenfirewall/filter/input/stateful/dovecot
View File

@ -1,2 +1,2 @@
tcp dport { 143, 993 } ct state new meter dovecot4 { ip saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole4 { ip saddr } counter;
tcp dport { 143, 993 } ct state new meter dovecot6 { ip6 saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole6 { ip6 saddr } counter;
tcp dport { 143, 993 } ct state new meter dovecot4 { ip saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole4 { ip saddr timeout 1h } counter;
tcp dport { 143, 993 } ct state new meter dovecot6 { ip6 saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole6 { ip6 saddr timeout 1h } counter;

4
config/nftables/nft/inet/redxenfirewall/filter/input/stateful/postfix
View File

@ -1,2 +1,2 @@
tcp dport { 25, 465, 587 } ct state new meter postfix4 { ip saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole4 { ip saddr } counter;
tcp dport { 25, 465, 587 } ct state new meter postfix6 { ip6 saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole6 { ip6 saddr } counter;
tcp dport { 25, 465, 587 } ct state new meter postfix4 { ip saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole4 { ip saddr timeout 1h } counter;
tcp dport { 25, 465, 587 } ct state new meter postfix6 { ip6 saddr timeout 1h limit rate over 2/minute burst 20 packets } update @blackhole6 { ip6 saddr timeout 1h } counter;