extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-25 15:48:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add caution to the Events example on blacklisting

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-07-15 14:30:31 -07:00
parent 8c27b027fc
commit 04c2a88d74
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/Events.xml
View File

@ -541,6 +541,14 @@ SetEvent(SSH,ACCEPT,src)</programlisting>
<programlisting>#ACTION SOURCE DEST PROTO DEST
# PORT(S)
SSHLIMIT net $FW tcp 22 </programlisting>
<caution>
<para>The technique demonstrated in this example is not self-cleaning.
The SSH_COUNTER event can become full with blackisted addresses that
never attempt to connect again. When that happens and a new entry is
added via SetEvent, the least recently seen address in the table is
deleted.</para>
</caution>
</section>
<section>