| @@ -1,10 +1,10 @@ | |||
| # max_pkt_per_interval | |||
| # maximum number of packets authorised per time interval. | |||
| max_pkt_per_interval=1 | |||
| max_pkt_per_interval=30 | |||
| # interval | |||
| # measurement time interval in seconds. | |||
| interval=10 | |||
| interval=30 | |||
| # debug | |||
| # enable debugging, warning, very verbose | |||
| @@ -13,9 +13,16 @@ debug=1 | |||
| # blacklist_time | |||
| # number of seconds this client will be ignored once | |||
| # it exceeded the max_pkt_per_interval per interval | |||
| blacklist_time=10 | |||
| blacklist_time=55 | |||
| # queue number | |||
| # refers to the queue-num of iptables. | |||
| # -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass | |||
| queue=67 | |||
| # dryrun | |||
| # if dryrun is set to 1 it will accept all packets no matter what. | |||
| # this can be used for testing, syslog will still display the blacklisting | |||
| # actions. | |||
| # Set to 0 for production. | |||
| dryrun=1 | |||