firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ip6t-firewall-server,ipt-firewall-server,default_settings.conf: some changes in default values limiting http connections.

Browse Source
This commit is contained in:
chris
2026-11-02 18:10:26 +01:00
parent 57861cb8ec
commit 9de4e742cd
3 changed files with 111 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/default_settings.conf
+9 -3
View File
@@ -81,14 +81,20 @@ min_tcp6_mss_for_https_val=1280
# ip6t-firewall-server,ipt-firewall-server:
# some restrictions on HTTP connections to counteract attacks.
#
# The default value used to be set to '30'
#
set_max_new_http_conn_per_ip_per_second=true
default_max_http_new_conn_per_ip_per_second=30
default_max_http_new_conn_per_ip_per_second=200
# The default value used to be set to '50'
#
set_max_concurrent_http_conn_per_ip=true
default_max_concurrent_http_conn_per_ip=50
default_max_concurrent_http_conn_per_ip=100
# The default value used to be set to '200'
#
set_max_new_http_conn_per_second=true
default_max_new_http_conn_per_second=200
default_max_new_http_conn_per_second=400
# ip6t-firewall-server:
# Prefix length for entries in 'ban_ipv6.list' given without mask.