firewall: Make ICMP ratelimiting a bit saner again.

This commit is contained in:
Michael Tremer
2014-03-05 12:31:36 +01:00
parent 6e9cf9ad86
commit 32c6ebdced

View File

@@ -3,7 +3,8 @@ net.ipv4.ip_dynaddr = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_ratemask = 88089
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_fin_timeout = 30