| # max_pkt_per_interval | # max_pkt_per_interval | ||||
| # maximum number of packets authorised per time interval. | # maximum number of packets authorised per time interval. | ||||
| max_pkt_per_interval=1 | |||||
| max_pkt_per_interval=30 | |||||
| # interval | # interval | ||||
| # measurement time interval in seconds. | # measurement time interval in seconds. | ||||
| interval=10 | |||||
| interval=30 | |||||
| # debug | # debug | ||||
| # enable debugging, warning, very verbose | # enable debugging, warning, very verbose | ||||
| # blacklist_time | # blacklist_time | ||||
| # number of seconds this client will be ignored once | # number of seconds this client will be ignored once | ||||
| # it exceeded the max_pkt_per_interval per interval | # it exceeded the max_pkt_per_interval per interval | ||||
| blacklist_time=10 | |||||
| blacklist_time=55 | |||||
| # queue number | # queue number | ||||
| # refers to the queue-num of iptables. | # refers to the queue-num of iptables. | ||||
| # -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass | # -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass | ||||
| queue=67 | queue=67 | ||||
| # dryrun | |||||
| # if dryrun is set to 1 it will accept all packets no matter what. | |||||
| # this can be used for testing, syslog will still display the blacklisting | |||||
| # actions. | |||||
| # Set to 0 for production. | |||||
| dryrun=1 |