Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Dave Taht
On Tue, Sep 3, 2019 at 8:10 AM Toke Høiland-Jørgensen wrote: > > Dave Taht writes: > > > On Tue, Sep 3, 2019 at 7:45 AM Toke Høiland-Jørgensen wrote: > >> > >> Dave Taht writes: > >> > >> > On Tue, Sep 3, 2019 at 5:23 AM Mikael Abrahamsson > >> > wrote: > >> >> > >> >> On Mon, 2 Sep 2019,

Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Toke Høiland-Jørgensen
Dave Taht writes: > On Tue, Sep 3, 2019 at 7:45 AM Toke Høiland-Jørgensen wrote: >> >> Dave Taht writes: >> >> > On Tue, Sep 3, 2019 at 5:23 AM Mikael Abrahamsson wrote: >> >> >> >> On Mon, 2 Sep 2019, Dave Taht wrote: >> >> >> >> > with copy-pasted parameters set in the 90s - openwrt's

Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Dave Taht
On Tue, Sep 3, 2019 at 7:45 AM Toke Høiland-Jørgensen wrote: > > Dave Taht writes: > > > On Tue, Sep 3, 2019 at 5:23 AM Mikael Abrahamsson wrote: > >> > >> On Mon, 2 Sep 2019, Dave Taht wrote: > >> > >> > with copy-pasted parameters set in the 90s - openwrt's default, last I > >> > looked, was

Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Toke Høiland-Jørgensen
Dave Taht writes: > On Tue, Sep 3, 2019 at 5:23 AM Mikael Abrahamsson wrote: >> >> On Mon, 2 Sep 2019, Dave Taht wrote: >> >> > with copy-pasted parameters set in the 90s - openwrt's default, last I >> > looked, was 25/sec. >> >> -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m

Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Dave Taht
On Tue, Sep 3, 2019 at 5:23 AM Mikael Abrahamsson wrote: > > On Mon, 2 Sep 2019, Dave Taht wrote: > > > with copy-pasted parameters set in the 90s - openwrt's default, last I > > looked, was 25/sec. > > -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit > 25/sec

Re: [Bloat] talking at linux plumbers in portugal next week

2019-09-03 Thread Mikael Abrahamsson
On Mon, 2 Sep 2019, Dave Taht wrote: with copy-pasted parameters set in the 90s - openwrt's default, last I looked, was 25/sec. -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN -A syn_flood -m comment