Commit 0a02966a authored by nimrod's avatar nimrod
Browse files

Router: Raise the SSH limits. 

The Am I Live checks routinely fail because of it.
parent ce5540cd

Ansible/roles/router/files/pf.conf

+1 −1
Original line number Diff line number Diff line
@@ -33,7 +33,7 @@ match on egress proto { tcp, udp } from kodi.shore.co.il tos 0x02 set queue bulk 
match on egress proto { tcp, udp } to kodi.shore.co.il tos 0x02 set queue bulk set prio 1



# Defaults

pass in quick proto tcp to (all:0) port ssh keep state (source-track rule, max 100, max-src-nodes 10, max-src-conn-rate 15/60, overload <brute> flush global)

pass in quick proto tcp to (all:0) port ssh keep state (source-track rule, max 100, max-src-nodes 20, max-src-conn-rate 15/60, overload <brute> flush global)

match out on egress inet from (ingress:network) nat-to (egress)

block in all

pass out all