comparison example.conf @ 102:1cbefe9c26c1

Swap defaults for filter and dronebl threshold values.
author Matti Hamalainen <ccr@tnsp.org>
date Tue, 01 Sep 2009 18:48:47 +0300
parents d8d8cd36e201
children d38b77d1e6c8
comparison
equal deleted inserted replaced
99:ca0fd7f3909b 102:1cbefe9c26c1
56 ## Full path to iptables binary 56 ## Full path to iptables binary
57 IPTABLES = "/sbin/iptables" 57 IPTABLES = "/sbin/iptables"
58 58
59 ## How many "hits" the IP needs until it is eligible to be filtered. 59 ## How many "hits" the IP needs until it is eligible to be filtered.
60 ## (the "hits" can be from any check, e.g. sshd crack, httpd, etc.) 60 ## (the "hits" can be from any check, e.g. sshd crack, httpd, etc.)
61 FILTER_THRESHOLD = 3 61 FILTER_THRESHOLD = 5
62 62
63 ## Weeding threshold in hours. Entries older than this will be removed 63 ## Weeding threshold in hours. Entries older than this will be removed
64 ## off from current netfilter settings. Also, entries older than this 64 ## off from current netfilter settings. Also, entries older than this
65 ## will not be added to netfilter to begin with. 65 ## will not be added to netfilter to begin with.
66 FILTER_MAX_AGE = 168 66 FILTER_MAX_AGE = 168
200 DRONEBL = 0 200 DRONEBL = 0
201 201
202 ## Number of hits required before host IP goes to submission queue. 202 ## Number of hits required before host IP goes to submission queue.
203 ## This setting is independent of the general THRESHOLD value and 203 ## This setting is independent of the general THRESHOLD value and
204 ## only affects DroneBL submissions. 204 ## only affects DroneBL submissions.
205 DRONEBL_THRESHOLD = 5 205 DRONEBL_THRESHOLD = 3
206 206
207 ## Maximum age of hits counted towards DroneBL submission threshold. 207 ## Maximum age of hits counted towards DroneBL submission threshold.
208 ## NOTICE! Value this is in _minutes_! 208 ## NOTICE! Value this is in _minutes_!
209 DRONEBL_MAX_AGE = 60 209 DRONEBL_MAX_AGE = 60
210 210