From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 1 Jun 2018 18:12:06 +0000 (+0200)
Subject: snapshot: allow 6 requests per minute even to clients that we think are excessive
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-puppet.git;a=commitdiff_plain;h=6421c571fd4794f93352a80c0110ff33b1f6c60d

snapshot: allow 6 requests per minute even to clients that we think are excessive
---

diff --git a/modules/apache2/manifests/dynamic.pp b/modules/apache2/manifests/dynamic.pp
index 5df01a16f..b39e5597a 100644
--- a/modules/apache2/manifests/dynamic.pp
+++ b/modules/apache2/manifests/dynamic.pp
@@ -60,6 +60,7 @@ class apache2::dynamic {
 			description => 'http subchain',
 			chain       => 'http',
 			rule        => '
+					mod hashlimit hashlimit-name HTTPDOSPRE hashlimit-mode srcip hashlimit-burst 10 hashlimit 6/minute jump ACCEPT;
 					mod recent name HTTPDOS update seconds 900 jump log_or_drop;
 					mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 200 hashlimit 30/minute jump ACCEPT;
 					mod recent name HTTPDOS set jump log_or_drop'