aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-09 19:02:14 +0200
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-24 01:52:49 +0200
commita76485aeb36af1441cd3baf114bf8d60650653c5 (patch)
tree9d3e4bd1b971f7eba1cd4657c5d296b66460fd35 /README.md
parent61f712fd59b4872b89674ad2d0880c4528dcf7ff (diff)
downloadawall-a76485aeb36af1441cd3baf114bf8d60650653c5.tar.bz2
awall-a76485aeb36af1441cd3baf114bf8d60650653c5.tar.xz
FilterLimit: non-updating limits
Diffstat (limited to 'README.md')
-rw-r--r--README.md22
1 files changed, 12 insertions, 10 deletions
diff --git a/README.md b/README.md
index 776ec90..c8edb0b 100644
--- a/README.md
+++ b/README.md
@@ -223,16 +223,18 @@ classes](#log), the limit is considered absolute by default.
The packet rates contributing to the limit may be summed over multiple
[filters](#filter). This can be achieved by setting the optional
-**name** attribute to equal values among the related limits. Named
-limits may be specific only to fixed-size blocks of either the source
-or the destination address, not both. However, the address to be
-considered may vary among the rules using the limit and may be
-selected by setting an attribute named **addr** to either **src**
-(default) or **dest**. By default, all bits of the selected address
-are taken into account, but address family&ndash;specific prefix
-lengths can be set via the top-level **limit** dictionary, where the
-keys correspond to limit names and values follow the syntax of
-**src-mask** and **dest-mask**.
+**name** attribute to equal values among the related limits. If the
+**update** attribute is set to **false** (boolean), the rates measured
+at this limit are not included in the sum, but the referred sum is
+used to make the limiting decision. Named limits may be specific only
+to fixed-size blocks of either the source or the destination address,
+not both. However, the address to be considered may vary among the
+rules using the limit and may be selected by setting an attribute
+named **addr** to either **src** (default) or **dest**. By default,
+all bits of the selected address are taken into account, but address
+family&ndash;specific prefix lengths can be set via the top-level
+**limit** dictionary, where the keys correspond to limit names and
+values follow the syntax of **src-mask** and **dest-mask**.
### <a name="log"></a>Logging Classes