X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fsecurity_tracker.pp;h=1e93e29e88984059e73d2a6640d04a406e7b062a;hb=f6a4eb4d0eb7078ffb261191abab23801e12db17;hp=d8d23a33df1965f396ae921ab2d4c5531f67322c;hpb=03ef07abc57dc3d08ce2eb8ad21b8a5fe724d9a6;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index d8d23a33d..1e93e29e8 100644
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -3,11 +3,15 @@ class roles::security_tracker {
 	include apache2::proxy_http
 	include apache2::expires
 
+	apache2::module { 'cache_disk':
+		ensure => absent,
+	}
+
 	# security-tracker abusers
 	#  66.170.99.1  20180706 excessive number of requests
 	#  66.170.99.2  20180706 excessive number of requests
 	@ferm::rule { 'dsa-sectracker-abusers':
-		prio  => "000",
+		prio  => "005",
 		rule  => "saddr (66.170.99.1 66.170.99.2) DROP",
 	}
 
@@ -23,11 +27,11 @@ class roles::security_tracker {
 	}
 
 	# traffic shaping http traffic
-	@ferm::rule { 'dsa-security-tracker-shape':
-		table => 'mangle',
-		chain => 'OUTPUT',
-		rule  => "proto tcp sport 443 MARK set-mark 20",
-	}
+	#@ferm::rule { 'dsa-security-tracker-shape':
+	#	table => 'mangle',
+	#	chain => 'OUTPUT',
+	#	rule  => "proto tcp sport 443 MARK set-mark 20",
+	#}
 
 	file { '/usr/local/sbin/traffic-shape':
 		mode   => '0755',