Hi there,
I have been using the "Max new connections / X seconds" option to
provide anti-hammer support for my SSH server.
Just now, I noticed a few things when I accidentally tripped it:
1) Other rules were affected as well.
In my case the SSH 4/60 max killed my web server when coming from
the killed IP.
2) The connection didn't come back for 1 hour!
Is the value in minutes or is something else going on?
This happened on a "few weeks old" 2.0 release, but I think at least
#2 happened on 1.x as well.
Regards,
-Jeppe
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org