X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fapache2%2Fmanifests%2Fdynamic.pp;h=b39e5597a13bb5b0a817828710177594f331b079;hb=6421c571fd4794f93352a80c0110ff33b1f6c60d;hp=75b3fb9d9ced0c61abb802c6c9411471c250c6dc;hpb=c145ce1571a90464c010a8753b0158e49024193b;p=mirror%2Fdsa-puppet.git diff --git a/modules/apache2/manifests/dynamic.pp b/modules/apache2/manifests/dynamic.pp index 75b3fb9d9..b39e5597a 100644 --- a/modules/apache2/manifests/dynamic.pp +++ b/modules/apache2/manifests/dynamic.pp @@ -60,8 +60,9 @@ class apache2::dynamic { description => 'http subchain', chain => 'http', rule => ' - mod recent name HTTPDOS update seconds 1800 jump log_or_drop; - mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 30 hashlimit 20/minute jump ACCEPT; + mod hashlimit hashlimit-name HTTPDOSPRE hashlimit-mode srcip hashlimit-burst 10 hashlimit 6/minute jump ACCEPT; + mod recent name HTTPDOS update seconds 900 jump log_or_drop; + mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 200 hashlimit 30/minute jump ACCEPT; mod recent name HTTPDOS set jump log_or_drop' } } else {