mirror of
https://github.com/internetee/registry.git
synced 2025-08-04 08:52:04 +02:00
Merge branch 'master' of github.com:domify/registry
This commit is contained in:
commit
e2d2350692
3 changed files with 14 additions and 2 deletions
|
@ -1,3 +1,4 @@
|
|||
if !Rails.env.test? && ENV['new_relic_app_name'].present?
|
||||
require 'newrelic'
|
||||
NewRelic::Agent.config[:app_name] = "#{ENV['new_relic_app_name']} - #{Rails.env}"
|
||||
end
|
||||
|
|
|
@ -830,4 +830,4 @@ en:
|
|||
unset_force_delete: 'Unset force delete'
|
||||
domain_expiring: 'Domain expiring'
|
||||
domain_validation_rules: 'Domain validation rules'
|
||||
bank_statement_desc: 'Import file row will match only when matching following attributes: <b>invoice nr, description, sum and client ref number</b>.'
|
||||
bank_statement_desc: 'Import file row will match only when matching following attributes: <b><br>ref number<br>payment amount<br>invoice number (the very first number in comment field)</b>.'
|
||||
|
|
|
@ -98,10 +98,21 @@ REGISTRAR_CODE="test"
|
|||
SECONDS=60
|
||||
# Max connections per IP
|
||||
BLOCKCOUNT=100
|
||||
# Source specification. Address can be either a network name, a hostname, a network IP address
|
||||
# (with /mask), or a plain IP address. Hostnames will be resolved once only, before the rule
|
||||
# is submitted to the kernel. Please note that specifying any name to be resolved with
|
||||
# a remote query such as DNS is a really bad idea. The mask can be either a network mask or
|
||||
# a plain number, specifying the number of 1's at the left side of the network mask.
|
||||
# Thus, a mask of 24 is equivalent to 255.255.255.0. A "!" argument before
|
||||
# the address specification inverts the sense of the address.
|
||||
# The flag --src is an alias for this option. Multiple addresses can be specified,
|
||||
# but this will expand to multiple rules (when adding with -A),
|
||||
# or will cause multiple rules to be deleted (with -D).
|
||||
REGISTRAR_HANDLE_SOURCE="x.x.x.x"
|
||||
# default action can be DROP or REJECT or something else.
|
||||
DACTION="REJECT"
|
||||
$IPT -A INPUT -p tcp --dport 700 -i eth0 -m state --state NEW -m recent --set
|
||||
$IPT -A INPUT -p tcp --dport 700 -m recent --name $REGISTRAR_CODE --rdest --rcheck --hitcount ${BLOCKCOUNT} --seconds ${SECONDS} -j ${DACTION}
|
||||
$IPT -A INPUT -p tcp --dport 700 -s $REGISTRAR_HANDLE_SOURCE -m recent --name $REGISTRAR_CODE --rdest --rcheck --hitcount ${BLOCKCOUNT} --seconds ${SECONDS} -j ${DACTION}
|
||||
````
|
||||
|
||||
After adding iptable counters, please add correct permissions to proc files at path /proc/net/xt_recent
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue