瀏覽代碼

added new dryrun directive

tags/v1.0.0
Pascal Gloor 5 年之前
父節點
當前提交
7bb46d6c5a
共有 1 個檔案被更改,包括 10 行新增3 行删除
  1. 10
    3
      dhcp_protect.conf

+ 10
- 3
dhcp_protect.conf 查看文件

# max_pkt_per_interval # max_pkt_per_interval
# maximum number of packets authorised per time interval. # maximum number of packets authorised per time interval.
max_pkt_per_interval=1
max_pkt_per_interval=30


# interval # interval
# measurement time interval in seconds. # measurement time interval in seconds.
interval=10
interval=30


# debug # debug
# enable debugging, warning, very verbose # enable debugging, warning, very verbose
# blacklist_time # blacklist_time
# number of seconds this client will be ignored once # number of seconds this client will be ignored once
# it exceeded the max_pkt_per_interval per interval # it exceeded the max_pkt_per_interval per interval
blacklist_time=10
blacklist_time=55


# queue number # queue number
# refers to the queue-num of iptables. # refers to the queue-num of iptables.
# -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass # -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass
queue=67 queue=67

# dryrun
# if dryrun is set to 1 it will accept all packets no matter what.
# this can be used for testing, syslog will still display the blacklisting
# actions.
# Set to 0 for production.
dryrun=1

Loading…
取消
儲存