Bug 10489

Summary: No rate limiting for REJECT targets
Product: IPFire Reporter: Michael Tremer <michael.tremer>
Component: ---Assignee: Michael Tremer <michael.tremer>
Status: CLOSED FIXED QA Contact:
Severity: - Unknown -    
Priority: - Unknown - CC: alexander.marx, stefan.schantl
Version: 2   
Hardware: unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 10486    

Description Michael Tremer 2014-03-03 08:57:24 UTC 
Like there is no rate limiting for LOG rules, there is also no rate limiting for REJECT targets.

This makes it easy to cause a DoS because of the (usually smaller) uplink can be saturated with ICMP error messages.