diff options
author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-01-09 00:46:04 +0200 |
---|---|---|
committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-01-24 01:52:49 +0200 |
commit | 4b838acfe5877a15e0a77bd59ff9f5dfc61604df (patch) | |
tree | 9e95bf772e9ac42d7df091d0c3763c14e9d82d9b /README.md | |
parent | 0a9a8db212d5d45b136c103fd6b8db6d16dad895 (diff) | |
download | awall-4b838acfe5877a15e0a77bd59ff9f5dfc61604df.tar.bz2 awall-4b838acfe5877a15e0a77bd59ff9f5dfc61604df.tar.xz |
Filter: named limits
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 13 |
1 files changed, 13 insertions, 0 deletions
@@ -221,6 +221,19 @@ the enclosing object. For [filters](#filter), the default behavior is to apply the limit for each source address separately. For [logging classes](#log), the limit is considered absolute by default. +The packet rates contributing to the limit may be summed over multiple +[filters](#filter). This can be achieved by setting the optional +**name** attribute to equal values among the related limits. Named +limits may be specific only to fixed-size blocks of either the source +or the destination address, not both. However, the address to be +considered may vary among the rules using the limit and may be +selected by setting an attribute named **addr** to either **src** +(default) or **dest**. By default, all bits of the selected address +are taken into account, but address family–specific prefix +lengths can be set via the top-level **limit** dictionary, where the +keys correspond to limit names and values follow the syntax of +**src-mask** and **dest-mask**. + ### <a name="log"></a>Logging Classes A *logging class* specifies how packets matching certain rules are |