Rate-limit log sites with shorewall LOGLIMIT

2026-10-04 15:52:37 +11:00
parent b8410488d2
commit 2e8d51759d
7 changed files with 155 additions and 1 deletions
@@ -6,6 +6,8 @@ settings:
  address_family: inet
  ip_forwarding: true
  log_level: info
+  # rate limit for every log site (shorewall LOGLIMIT, global form): rate/{sec|min|hour|day}[:burst]; unset logs every hit
+  log_limit: 1/sec:10
  table_name: tomswall
  implicit_continue: false
  # ct state invalid/untracked verdict: accept, drop, reject, continue (pass to rules)