From 6421c571fd4794f93352a80c0110ff33b1f6c60d Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Fri, 1 Jun 2018 20:12:06 +0200 Subject: [PATCH] snapshot: allow 6 requests per minute even to clients that we think are excessive --- modules/apache2/manifests/dynamic.pp | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/apache2/manifests/dynamic.pp b/modules/apache2/manifests/dynamic.pp index 5df01a16f..b39e5597a 100644 --- a/modules/apache2/manifests/dynamic.pp +++ b/modules/apache2/manifests/dynamic.pp @@ -60,6 +60,7 @@ class apache2::dynamic { description => 'http subchain', chain => 'http', rule => ' + mod hashlimit hashlimit-name HTTPDOSPRE hashlimit-mode srcip hashlimit-burst 10 hashlimit 6/minute jump ACCEPT; mod recent name HTTPDOS update seconds 900 jump log_or_drop; mod hashlimit hashlimit-name HTTPDOS hashlimit-mode srcip hashlimit-burst 200 hashlimit 30/minute jump ACCEPT; mod recent name HTTPDOS set jump log_or_drop' -- 2.20.1