diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml index 71d953afa..fe1a60e30 100644 --- a/docs/configuration_file_basics.xml +++ b/docs/configuration_file_basics.xml @@ -1598,6 +1598,30 @@ DNAT net loc:192.168.1.3 tcp 4000:4100 passes, one of the bursts will be regained; if no packets hit the rule for 30 seconds, the burst will be fully recharged; back where we started. + + + The LOGRATE and LOGBURST options are deprecated in favor of + LOGLIMIT. + + + Shorewall also supports per-IP rate limiting. + + Another example from shorewall.conf (5): + + + LOGLIMIT="s:5/min:5" + + + Here, the leading "s:" indicates that logging is to be limited by + source IP address ("d:" would indicate limiting by destination IP + address). + + "s:" is followed by the rate (5 messages per minute) and the burst + (5). + + The rate and limit arguments have the same meaning as in the example + above.