Configure limits for HTTPS connections.

conf/main_ipv6.conf.sample

@@ -401,6 +401,24 @@ forward_http_server_ips=""
 # -
 http_ports="$standard_http_ports"
 
+# ip6t-firewall-server:
+#     Clamp the advertised MSS of incoming HTTPS SYN packets to 1360.
+#
+throttle_tcp6_mss_for_https=false
+tcp6_mss_for_https_val=${default_min_tcp6_mss_for_https_val}
+
+# ip6t-firewall-server,ipt-firewall-server:
+#     some restrictions on HTTP connections to counteract attacks.
+#
+set_max_new_http_conn_per_ip_per_second=true
+max_http_new_conn_per_ip_per_second=${default_max_http_new_conn_per_ip_per_second}
+
+set_max_concurrent_http_conn_per_ip=true
+max_concurrent_http_conn_per_ip=${default_max_concurrent_http_conn_per_ip}
+
+set_max_new_http_conn_per_second=true
+max_new_http_conn_per_second=${default_max_new_http_conn_per_second}
+
 
 # - LOG CGI script Traffic out
 # -
@@ -422,9 +440,9 @@ forward_mm_server_ips=""
 
 # - UDP Ports IN and OUT used by MM Servive
 # -
-mm_udp_ports_in="$stansard_mattermost_udp_ports_in"
-mm_tcp_ports_in="$stansard_mattermost_tcp_ports_in"
-mm_udp_ports_out="$stansard_mattermost_udp_ports_out"
+mm_udp_ports_in="$standard_mattermost_udp_ports_in"
+mm_tcp_ports_in="$standard_mattermost_tcp_ports_in"
+mm_udp_ports_out="$standard_mattermost_udp_ports_out"
 
 
 # - Mail SMTP Server