-
Notifications
You must be signed in to change notification settings - Fork 2
/
log-medium.ruleset
30 lines (27 loc) · 1.15 KB
/
log-medium.ruleset
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
table inet filter {
chain u-before-logging-input {
ct state new limit rate 3/minute burst 10 packets counter log prefix "[UNITE INPUT AUDIT] "
}
chain u-before-logging-output {
ct state new limit rate 3/minute burst 10 packets counter log prefix "[UNITE OUTPUT AUDIT] "
}
chain u-before-logging-forward {
ct state new limit rate 3/minute burst 10 packets counter log prefix "[UNITE FORWARD AUDIT] "
}
chain u-after-logging-input {
limit rate 3/minute burst 10 packets counter log prefix "[UNITE INPUT BLOCK] "
}
chain u-after-logging-output {
limit rate 3/minute burst 10 packets counter log prefix "[UNITE OUTPUT ALLOW] "
}
chain u-after-logging-forward {
limit rate 3/minute burst 10 packets counter log prefix "[UNITE FORWARD BLOCK] "
}
chain u-logging-deny {
ct state invalid limit rate 3/minute burst 10 packets counter log prefix "[UNITE AUDIT INVALID] "
limit rate 3/minute burst 10 packets counter log prefix "[UNITE BLOCK] "
}
chain u-logging-allow {
limit rate 3/minute burst 10 packets counter log prefix "[UNITE ALLOW] "
}
}