chiark
/
gitweb
/
~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
telecaster.m4: Rate-limit incoming ICP.
[firewall]
/
telecaster.m4
diff --git
a/telecaster.m4
b/telecaster.m4
index 4e3763d11875137e88e389748dec550339c16b14..dd278b89bdfbf9034998765977768caa8d8b7184 100644
(file)
--- a/
telecaster.m4
+++ b/
telecaster.m4
@@
-32,8
+32,10
@@
allowservices inbound tcp \
ftp ftp_data \
rsync \
http https squid
-allowservices inbound udp \
- icp
+
+run iptables -A inbound -j ACCEPT \
+ -p udp --destination-port $port_icp \
+ -m limit --limit 10/second --limit-burst 100
## Other interesting things.
dnsresolver inbound