Re: [pve-devel] [RFC firewall] fix: #2123 Logging of user defined firewall rules

2019-03-18 Thread Thomas Lamprecht
On 3/14/19 2:07 PM, Christian Ebner wrote: > As I understand it this matches the 5 packets from the burst and then only if > the burst refilled. > See > https://thelowedown.wordpress.com/2008/07/03/iptables-how-to-use-the-limits-module/ > > We could let the user decide the rate and burst limit,

Re: [pve-devel] [RFC firewall] fix: #2123 Logging of user defined firewall rules

2019-03-14 Thread Christian Ebner
As I understand it this matches the 5 packets from the burst and then only if the burst refilled. See https://thelowedown.wordpress.com/2008/07/03/iptables-how-to-use-the-limits-module/ We could let the user decide the rate and burst limit, but that would probably be a bit overkill and add

Re: [pve-devel] [RFC firewall] fix: #2123 Logging of user defined firewall rules

2019-03-14 Thread Thomas Lamprecht
On 3/14/19 1:06 PM, Christian Ebner wrote: > This allows a user to log traffic filtered by a self defined firewall rule. > Therefore the API is extended to include a 'log' option allow to specify the > log level for each rule individually. > > The 'log' option can also be specified in the fw

[pve-devel] [RFC firewall] fix: #2123 Logging of user defined firewall rules

2019-03-14 Thread Christian Ebner
This allows a user to log traffic filtered by a self defined firewall rule. Therefore the API is extended to include a 'log' option allow to specify the log level for each rule individually. The 'log' option can also be specified in the fw config. In order to reduce the log amount, logging is