From 7d40f000abf43f9f18f3dcdef434a1acc6c75063 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 10 Nov 2011 16:36:13 -0200
Subject: SSL computational DoS mitigation

---
 manifests/subsystems/firewall.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'manifests/subsystems/firewall.pp')

diff --git a/manifests/subsystems/firewall.pp b/manifests/subsystems/firewall.pp
index c3c5396..1760f7b 100644
--- a/manifests/subsystems/firewall.pp
+++ b/manifests/subsystems/firewall.pp
@@ -116,7 +116,7 @@ class firewall {
     destination     => '$FW',
     proto           => '-',
     destinationport => '-',
-    ratelimit       => '-',
+    ratelimit       => '$firewall_ssl_ratelimit',
     order           => '103',
   }
 
-- 
cgit v1.2.3