firewall: Extend rate limiting for ICMP error messages.

Fixes #10489.
2026-04-09 18:45:54 +02:00 · 2014-03-04 14:14:54 +01:00
parent fbd8ac3c8c
commit fa8229546b
1 changed files with 2 additions and 0 deletions
--- a/config/etc/sysctl.conf
+++ b/config/etc/sysctl.conf
@@ -1,7 +1,9 @@
 net.ipv4.ip_forward = 1
 net.ipv4.ip_dynaddr = 1
+
 net.ipv4.icmp_echo_ignore_broadcasts = 1
 net.ipv4.icmp_ignore_bogus_error_responses = 1
+net.ipv4.icmp_ratemask = 88089

 net.ipv4.tcp_syncookies = 1
 net.ipv4.tcp_fin_timeout = 30