X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Froles%2Fmanifests%2Fsecurity_tracker.pp;h=4aa42196f6628b9dde83f8c89b22346832c55875;hb=8bc0bc85e4bcf39fadda0bec1e369fdfce12e53c;hp=1e93e29e88984059e73d2a6640d04a406e7b062a;hpb=bd7d026dba49c5698d3c5c76e4c7a6b99d40d213;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp index 1e93e29e8..4aa42196f 100644 --- a/modules/roles/manifests/security_tracker.pp +++ b/modules/roles/manifests/security_tracker.pp @@ -10,7 +10,7 @@ class roles::security_tracker { # security-tracker abusers # 66.170.99.1 20180706 excessive number of requests # 66.170.99.2 20180706 excessive number of requests - @ferm::rule { 'dsa-sectracker-abusers': + ferm::rule { 'dsa-sectracker-abusers': prio => "005", rule => "saddr (66.170.99.1 66.170.99.2) DROP", } @@ -27,7 +27,7 @@ class roles::security_tracker { } # traffic shaping http traffic - #@ferm::rule { 'dsa-security-tracker-shape': + #ferm::rule { 'dsa-security-tracker-shape': # table => 'mangle', # chain => 'OUTPUT', # rule => "proto tcp sport 443 MARK set-mark 20",