docs(config): Document hitcount and ICMP use with example config
This commit is contained in:
parent
f4e31ceebe
commit
6b5d54ecdf
11
README.md
11
README.md
@ -110,10 +110,18 @@ addr =
|
|||||||
ports = 80, 443
|
ports = 80, 443
|
||||||
proto = tcp
|
proto = tcp
|
||||||
state = NEW
|
state = NEW
|
||||||
|
hitcount =
|
||||||
do_ipv6 = false
|
do_ipv6 = false
|
||||||
firewalld_direct_file_abs = /etc/firewalld/direct.xml
|
firewalld_direct_file_abs = /etc/firewalld/direct.xml
|
||||||
restart_firewalld_after_change = true
|
restart_firewalld_after_change = true
|
||||||
|
|
||||||
|
[anyone-may-icmp-with-limit]
|
||||||
|
addr =
|
||||||
|
ports =
|
||||||
|
proto = icmp
|
||||||
|
state = NEW,UNTRACKED
|
||||||
|
hitcount = 120/60
|
||||||
|
|
||||||
[anyone-can-access-website]
|
[anyone-can-access-website]
|
||||||
|
|
||||||
# Unsetting 'proto' while having a 'ports' value results in an invalid section
|
# Unsetting 'proto' while having a 'ports' value results in an invalid section
|
||||||
@ -128,8 +136,9 @@ addr = 2606:4700:20::681a:804, lowendtalk.com
|
|||||||
ports = 80, 443
|
ports = 80, 443
|
||||||
do_ipv6 = true
|
do_ipv6 = true
|
||||||
|
|
||||||
[allow-anyone-to-access-mail-services]
|
[anyone-may-access-mail-services]
|
||||||
ports = 143, 993, 110, 995, 25, 465, 587
|
ports = 143, 993, 110, 995, 25, 465, 587
|
||||||
|
hitcount = 120/60
|
||||||
|
|
||||||
[deny-all]
|
[deny-all]
|
||||||
target = DROP
|
target = DROP
|
||||||
|
Loading…
x
Reference in New Issue
Block a user