diff options
author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2013-08-02 12:31:12 +0300 |
---|---|---|
committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2013-08-02 12:31:12 +0300 |
commit | 085e778404e3058cc2b803d4d0fbd106abad8bd0 (patch) | |
tree | 877ac79f011df1d8f3413989dc9da679f460bc52 | |
parent | e516d40ffb333a7b9f0e0cb561daf41518ef36f3 (diff) | |
download | awall-085e778404e3058cc2b803d4d0fbd106abad8bd0.tar.bz2 awall-085e778404e3058cc2b803d4d0fbd106abad8bd0.tar.xz |
limit packet/connection rate per source IP
-rw-r--r-- | awall/modules/filter.lua | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua index f01b586..d21b79e 100644 --- a/awall/modules/filter.lua +++ b/awall/modules/filter.lua @@ -212,7 +212,7 @@ function Filter:extraoptfrags() if count > RECENT_MAX_COUNT then ofrags = { { - opts='-m limit --limit '..count..'/second', + opts='-m hashlimit --hashlimit-upto '..count..'/second --hashlimit-mode srcip --hashlimit-name '..chain, target=logchain(self.log, 'accept', 'ACCEPT') }, {target='DROP'} |