mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-11 19:55:52 +02:00
suricata: increase dns flood trigger
on slow lines unbound trigger the floodprotection at init. Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
@@ -224,7 +224,7 @@ app-layer:
|
||||
|
||||
# How many unreplied DNS requests are considered a flood.
|
||||
# If the limit is reached, app-layer-event:dns.flooded; will match.
|
||||
request-flood: 512
|
||||
request-flood: 2048
|
||||
|
||||
tcp:
|
||||
enabled: yes
|
||||
|
||||
Reference in New Issue
Block a user