Ruakij 7604bc4dac host_firewall: rejected handshake flows are remembered for 30s and reset per packet, the first data segment no longer slips through; handshake match needs a bare ACK

2026-10-26 14:56:59 +00:00

..

defaults

host_firewall: handshake meter carries the service limit, SYN meters become a flood cap at 2x rate and 2x burst

2026-10-26 14:48:25 +00:00

files

host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh

2026-10-25 12:12:27 +00:00

tasks

host_firewall: handshake meters per source reject over-limit connections with fw-rl-hs:, SYN meters log fw-rl-addr: and fw-rl-range: as evidence, conntrack accounting on

2026-10-26 14:35:28 +00:00

templates

host_firewall: rejected handshake flows are remembered for 30s and reset per packet, the first data segment no longer slips through; handshake match needs a bare ACK

2026-10-26 14:56:59 +00:00