aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-09 00:46:04 +0200
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-24 01:52:49 +0200
commit4b838acfe5877a15e0a77bd59ff9f5dfc61604df (patch)
tree9e95bf772e9ac42d7df091d0c3763c14e9d82d9b /README.md
parent0a9a8db212d5d45b136c103fd6b8db6d16dad895 (diff)
downloadawall-4b838acfe5877a15e0a77bd59ff9f5dfc61604df.tar.bz2
awall-4b838acfe5877a15e0a77bd59ff9f5dfc61604df.tar.xz
Filter: named limits
Diffstat (limited to 'README.md')
-rw-r--r--README.md13
1 files changed, 13 insertions, 0 deletions
diff --git a/README.md b/README.md
index 3c3dd10..776ec90 100644
--- a/README.md
+++ b/README.md
@@ -221,6 +221,19 @@ the enclosing object. For [filters](#filter), the default behavior is
to apply the limit for each source address separately. For [logging
classes](#log), the limit is considered absolute by default.
+The packet rates contributing to the limit may be summed over multiple
+[filters](#filter). This can be achieved by setting the optional
+**name** attribute to equal values among the related limits. Named
+limits may be specific only to fixed-size blocks of either the source
+or the destination address, not both. However, the address to be
+considered may vary among the rules using the limit and may be
+selected by setting an attribute named **addr** to either **src**
+(default) or **dest**. By default, all bits of the selected address
+are taken into account, but address family&ndash;specific prefix
+lengths can be set via the top-level **limit** dictionary, where the
+keys correspond to limit names and values follow the syntax of
+**src-mask** and **dest-mask**.
+
### <a name="log"></a>Logging Classes
A *logging class* specifies how packets matching certain rules are