2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
12 chain log_and_reject {
13 ULOG ulog-prefix "REJECT: ";
14 proto tcp REJECT reject-with tcp-reset;
19 mod hashlimit hashlimit-name ulogreject hashlimit-mode srcip hashlimit-burst 30 hashlimit 15/second jump log_and_reject;
20 mod hashlimit hashlimit-name uloglogdrop hashlimit-mode srcip hashlimit-burst 30 hashlimit 15/second ULOG ulog-prefix "DROP: ";
28 chain log_and_reject {
29 LOG log-prefix "REJECT: ";
30 proto tcp REJECT reject-with tcp-reset;
35 mod hashlimit hashlimit-name logreject hashlimit-mode srcip hashlimit-burst 30 hashlimit 15/second jump log_and_reject;
36 mod hashlimit hashlimit-name loglogdrop hashlimit-mode srcip hashlimit-burst 30 hashlimit 15/second LOG log-prefix "DROP: ";
45 mod state state (ESTABLISHED RELATED) ACCEPT;
48 mod state state (INVALID) DROP;