suricata: increase dns flood trigger

on slow lines unbound trigger the floodprotection at init.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Arne Fitzenreiter
2020-04-02 16:31:18 +00:00
parent 702b59cd02
commit 2f8a33e182

View File

@@ -224,7 +224,7 @@ app-layer:
# How many unreplied DNS requests are considered a flood.
# If the limit is reached, app-layer-event:dns.flooded; will match.
request-flood: 512
request-flood: 2048
tcp:
enabled: yes