From fa8229546b11ac356ff1df733a0b17eb045559ee Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 4 Mar 2014 14:14:54 +0100
Subject: [PATCH] firewall: Extend rate limiting for ICMP error messages.

Fixes #10489.
---
 config/etc/sysctl.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
index d6a2f7504..a91aeb37f 100644
--- a/config/etc/sysctl.conf
+++ b/config/etc/sysctl.conf
@@ -1,7 +1,9 @@
 net.ipv4.ip_forward = 1
 net.ipv4.ip_dynaddr = 1
+
 net.ipv4.icmp_echo_ignore_broadcasts = 1
 net.ipv4.icmp_ignore_bogus_error_responses = 1
+net.ipv4.icmp_ratemask = 88089
 
 net.ipv4.tcp_syncookies = 1
 net.ipv4.tcp_fin_timeout = 30
-- 
2.39.2