diff options
author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-01-09 19:02:14 +0200 |
---|---|---|
committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-01-24 01:52:49 +0200 |
commit | a76485aeb36af1441cd3baf114bf8d60650653c5 (patch) | |
tree | 9d3e4bd1b971f7eba1cd4657c5d296b66460fd35 /README.md | |
parent | 61f712fd59b4872b89674ad2d0880c4528dcf7ff (diff) | |
download | awall-a76485aeb36af1441cd3baf114bf8d60650653c5.tar.bz2 awall-a76485aeb36af1441cd3baf114bf8d60650653c5.tar.xz |
FilterLimit: non-updating limits
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 22 |
1 files changed, 12 insertions, 10 deletions
@@ -223,16 +223,18 @@ classes](#log), the limit is considered absolute by default. The packet rates contributing to the limit may be summed over multiple [filters](#filter). This can be achieved by setting the optional -**name** attribute to equal values among the related limits. Named -limits may be specific only to fixed-size blocks of either the source -or the destination address, not both. However, the address to be -considered may vary among the rules using the limit and may be -selected by setting an attribute named **addr** to either **src** -(default) or **dest**. By default, all bits of the selected address -are taken into account, but address family–specific prefix -lengths can be set via the top-level **limit** dictionary, where the -keys correspond to limit names and values follow the syntax of -**src-mask** and **dest-mask**. +**name** attribute to equal values among the related limits. If the +**update** attribute is set to **false** (boolean), the rates measured +at this limit are not included in the sum, but the referred sum is +used to make the limiting decision. Named limits may be specific only +to fixed-size blocks of either the source or the destination address, +not both. However, the address to be considered may vary among the +rules using the limit and may be selected by setting an attribute +named **addr** to either **src** (default) or **dest**. By default, +all bits of the selected address are taken into account, but address +family–specific prefix lengths can be set via the top-level +**limit** dictionary, where the keys correspond to limit names and +values follow the syntax of **src-mask** and **dest-mask**. ### <a name="log"></a>Logging Classes |