[1] | 1 | // Athena sockets Configuration file |
---|
| 2 | // translated (davidsiaw) |
---|
| 3 | |
---|
| 4 | |
---|
| 5 | // Display debug reports (When something goes wrong during the report, the report is saved.) |
---|
| 6 | debug: no |
---|
| 7 | |
---|
| 8 | // How long can a socket stall before closing the connection (in seconds) |
---|
| 9 | stall_time: 60 |
---|
| 10 | |
---|
| 11 | //----- IP Rules Settings ----- |
---|
| 12 | |
---|
| 13 | // If IP's are checked when connecting. |
---|
| 14 | // This also enables DDoS protection. |
---|
| 15 | enable_ip_rules: yes |
---|
| 16 | |
---|
| 17 | // Order of the checks |
---|
| 18 | // deny,allow : Checks deny rules, then allow rules. Allows if no rules match. |
---|
| 19 | // allow,deny : Checks allow rules, then deny rules. Allows if no rules match. |
---|
| 20 | // mutual-failure : Allows only if an allow rule matches and no deny rules match. |
---|
| 21 | // (default is deny,allow) |
---|
| 22 | |
---|
| 23 | order: deny,allow |
---|
| 24 | // order: allow,deny |
---|
| 25 | // order: mutual-failture |
---|
| 26 | |
---|
| 27 | // IP rules |
---|
| 28 | // allow : Accepts connections from the ip range (even if flagged as DDoS) |
---|
| 29 | // deny : Rejects connections from the ip range |
---|
| 30 | // The rules are processed in order, the first matching rule of each list (allow and deny) is used |
---|
| 31 | |
---|
| 32 | // allow: 127.0.0.1 |
---|
| 33 | // allow: 192.168.0.0/16 |
---|
| 34 | // allow: 10.0.0.0/255.0.0.0 |
---|
| 35 | // allow: all |
---|
| 36 | |
---|
| 37 | // deny: 127.0.0.1 |
---|
| 38 | |
---|
| 39 | |
---|
| 40 | //---- DDoS Protection Settings ---- |
---|
| 41 | // If ddos_count connection request are made within ddos_interval msec, it assumes it's a DDoS attack |
---|
| 42 | |
---|
| 43 | // Consecutive attempts interval (msec) |
---|
| 44 | // (default is 3000 msecs, 3 seconds) |
---|
| 45 | ddos_interval: 3000 |
---|
| 46 | |
---|
| 47 | // Consecutive attempts trigger |
---|
| 48 | // (default is 5 attemps) |
---|
| 49 | ddos_count: 5 |
---|
| 50 | |
---|
| 51 | // The time interval after which the threat of DDoS is assumed to be gone. (msec) |
---|
| 52 | // After this amount of time, the DDoS restrictions are lifted. |
---|
| 53 | // (default is 600000 msecs, 10 minutes) |
---|
| 54 | ddos_autoreset: 600000 |
---|
| 55 | |
---|
| 56 | |
---|
| 57 | import: conf/import/packet_conf.txt |
---|