|
|
|
|
|
|
|
|
# max_pkt_per_interval |
|
|
# max_pkt_per_interval |
|
|
# maximum number of packets authorised per time interval. |
|
|
# maximum number of packets authorised per time interval. |
|
|
max_pkt_per_interval=1 |
|
|
|
|
|
|
|
|
max_pkt_per_interval=30 |
|
|
|
|
|
|
|
|
# interval |
|
|
# interval |
|
|
# measurement time interval in seconds. |
|
|
# measurement time interval in seconds. |
|
|
interval=10 |
|
|
|
|
|
|
|
|
interval=30 |
|
|
|
|
|
|
|
|
# debug |
|
|
# debug |
|
|
# enable debugging, warning, very verbose |
|
|
# enable debugging, warning, very verbose |
|
|
|
|
|
|
|
|
# blacklist_time |
|
|
# blacklist_time |
|
|
# number of seconds this client will be ignored once |
|
|
# number of seconds this client will be ignored once |
|
|
# it exceeded the max_pkt_per_interval per interval |
|
|
# it exceeded the max_pkt_per_interval per interval |
|
|
blacklist_time=10 |
|
|
|
|
|
|
|
|
blacklist_time=55 |
|
|
|
|
|
|
|
|
# queue number |
|
|
# queue number |
|
|
# refers to the queue-num of iptables. |
|
|
# refers to the queue-num of iptables. |
|
|
# -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass |
|
|
# -A FORWARD -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass |
|
|
queue=67 |
|
|
queue=67 |
|
|
|
|
|
|
|
|
|
|
|
# dryrun |
|
|
|
|
|
# if dryrun is set to 1 it will accept all packets no matter what. |
|
|
|
|
|
# this can be used for testing, syslog will still display the blacklisting |
|
|
|
|
|
# actions. |
|
|
|
|
|
# Set to 0 for production. |
|
|
|
|
|
dryrun=1 |