X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fsecurity_tracker.pp;h=4aa42196f6628b9dde83f8c89b22346832c55875;hb=e71099e47c57303bb7090e404db84ad3e8d3b75b;hp=8e60d7c1db1f4b916bd0222d1d4b2b30c5d91104;hpb=a7fa44d2c4bbcd3b21aced2e9c2a5db83014529a;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp index 8e60d7c1d..4aa42196f 100644 --- a/modules/roles/manifests/security_tracker.pp +++ b/modules/roles/manifests/security_tracker.pp @@ -4,13 +4,13 @@ class roles::security_tracker { include apache2::expires apache2::module { 'cache_disk': - ensure => present, + ensure => absent, } # security-tracker abusers # 66.170.99.1 20180706 excessive number of requests # 66.170.99.2 20180706 excessive number of requests - @ferm::rule { 'dsa-sectracker-abusers': + ferm::rule { 'dsa-sectracker-abusers': prio => "005", rule => "saddr (66.170.99.1 66.170.99.2) DROP", } @@ -27,7 +27,7 @@ class roles::security_tracker { } # traffic shaping http traffic - #@ferm::rule { 'dsa-security-tracker-shape': + #ferm::rule { 'dsa-security-tracker-shape': # table => 'mangle', # chain => 'OUTPUT', # rule => "proto tcp sport 443 MARK set-mark 20",