Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-06-14 00:42:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: Git-Mirrors:cb561de1041ae8853ea5fcbabb2a28009b17e690
Branches Tags
Git-Mirrors:main
..
compare: Git-Mirrors:6a325f87984389cf18386cf2c7dfc70becf6f792
Branches Tags
Git-Mirrors:main

3 Commits
cb561de104 ... 6a325f8798

Author SHA1 Message Date
Daniel Micay
6a325f8798 update python dependencies 2024-04-12 21:33:35 -04:00
Daniel Micay
bd6f127acf move nftables configuration to a directory 2024-04-12 21:33:35 -04:00
Daniel Micay
c412fec336 simplify rate limited synproxy bypass 2024-04-12 21:33:33 -04:00
1 changed files with 1 additions and 2 deletions
Show Stats Expand all files Collapse all files

3
nftables/nftables-mail.conf
View File

@ -45,8 +45,7 @@ table inet filter {
fib daddr . iif type != { local, broadcast, multicast } counter drop
# handle new TCP connections beyond rate limit via synproxy to avoid conntrack table exhaustion
tcp dport { 22, 25, 80, 443, 465, 993 } tcp flags syn limit rate 1024/second burst 128 packets accept
tcp dport { 22, 25, 80, 443, 465, 993 } tcp flags syn counter notrack accept
tcp dport { 22, 25, 80, 443, 465, 993 } tcp flags syn limit rate over 1024/second burst 128 packets counter notrack accept
meta l4proto { icmp, ipv6-icmp } notrack accept
}