[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 2f8a33e182f981153a61568261ba4daf3cd7492b

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 2f8a33e182f981153a61568261ba4daf3cd7492b

[Arne Fitzenreiter]

[-- Attachment #1: Type: text/plain, Size: 1580 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  2f8a33e182f981153a61568261ba4daf3cd7492b (commit)
      from  702b59cd028018d0002d90f0ed9afbfa2248ed6a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 2f8a33e182f981153a61568261ba4daf3cd7492b
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Thu Apr 2 16:31:18 2020 +0000

    suricata: increase dns flood trigger
    
    on slow lines unbound trigger the floodprotection at init.
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/suricata/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Difference in files:
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index cb7ececb4..54016a887 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -224,7 +224,7 @@ app-layer:
 
       # How many unreplied DNS requests are considered a flood.
       # If the limit is reached, app-layer-event:dns.flooded; will match.
-      request-flood: 512
+      request-flood: 2048
 
       tcp:
         enabled: yes


hooks/post-receive
--
IPFire 2.x development tree