From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 1 Jun 2018 16:38:35 +0000 (+0200)
Subject: snapshot_web dynamic rules
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-puppet.git;a=commitdiff_plain;h=ca3cf686759367452813fedae58bac7041cf4e48

snapshot_web dynamic rules
---

diff --git a/modules/apache2/manifests/dynamic.pp b/modules/apache2/manifests/dynamic.pp
index 75b3fb9d9..5df01a16f 100644
--- a/modules/apache2/manifests/dynamic.pp
+++ b/modules/apache2/manifests/dynamic.pp
@@ -60,8 +60,8 @@ class apache2::dynamic {
 			description => 'http subchain',
 			chain       => 'http',
 			rule        => '
-					mod recent name HTTPDOS update seconds 1800 jump log_or_drop;
-					mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 30 hashlimit 20/minute jump ACCEPT;
+					mod recent name HTTPDOS update seconds 900 jump log_or_drop;
+					mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 200 hashlimit 30/minute jump ACCEPT;
 					mod recent name HTTPDOS set jump log_or_drop'
 		}
 	} else {