]> git.donarmstrong.com Git - dsa-puppet.git/commitdiff
MIT seems to be hammering morricone, making /var fill up.
authorStephen Gran <steve@lobefin.net>
Mon, 2 May 2011 15:39:19 +0000 (16:39 +0100)
committerStephen Gran <steve@lobefin.net>
Mon, 2 May 2011 15:39:19 +0000 (16:39 +0100)
morricone:/var/log/apache2# grep ^128.30 backports-master.debian.org-access.log-20110502 | wc -l
2160933

Signed-off-by: Stephen Gran <steve@lobefin.net>
modules/apache2/manifests/init.pp

index f5c6f80c34dc0890392acac5469439ab4801a362..fbb45a46a9066e33377cb0dcf59850554a90d3a7 100644 (file)
@@ -154,7 +154,7 @@ class apache2 {
     }
 
     case $hostname {
-        busoni,duarte,holter,lindberg,master,merkel,powell,rore: {
+        busoni,duarte,holter,lindberg,master,merkel,morricone,powell,rore: {
             @ferm::rule { "dsa-http-limit":
                 prio            => "20",
                 description     => "limit HTTP DOS",
@@ -200,7 +200,7 @@ class apache2 {
                 description     => "http subchain",
                 chain           => 'http',
                 rule            => '
-                                    saddr ( 74.6.22.182 74.6.18.240 67.195.0.0/16 ) jump limit_yahoo;
+                                    saddr ( 128.30.0.0/16 74.6.22.182 74.6.18.240 67.195.0.0/16 ) jump limit_yahoo;
                                     saddr 124.115.0.0/21 jump limit_sosospider;
                                     saddr (65.52.0.0/14 207.46.0.0/16) jump limit_bing;
                                     saddr (66.249.64.0/19) jump limit_google;