aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2013-08-02 12:31:12 +0300
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2013-08-02 12:31:12 +0300
commit085e778404e3058cc2b803d4d0fbd106abad8bd0 (patch)
tree877ac79f011df1d8f3413989dc9da679f460bc52
parente516d40ffb333a7b9f0e0cb561daf41518ef36f3 (diff)
downloadawall-085e778404e3058cc2b803d4d0fbd106abad8bd0.tar.bz2
awall-085e778404e3058cc2b803d4d0fbd106abad8bd0.tar.xz
limit packet/connection rate per source IP
-rw-r--r--awall/modules/filter.lua2
1 files changed, 1 insertions, 1 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua
index f01b586..d21b79e 100644
--- a/awall/modules/filter.lua
+++ b/awall/modules/filter.lua
@@ -212,7 +212,7 @@ function Filter:extraoptfrags()
if count > RECENT_MAX_COUNT then
ofrags = {
{
- opts='-m limit --limit '..count..'/second',
+ opts='-m hashlimit --hashlimit-upto '..count..'/second --hashlimit-mode srcip --hashlimit-name '..chain,
target=logchain(self.log, 'accept', 'ACCEPT')
},
{target='DROP'}