X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/0f6364ac757bbdd02fe0e1577edebc2bd6198221..a188f54944e56c7588f7ebbabbef3cee19686575:/functions.m4

diff --git a/functions.m4 b/functions.m4
index c0cd0b3..b2e3cb6 100644
--- a/functions.m4
+++ b/functions.m4
@@ -50,6 +50,14 @@ defport () {
   eval port_$name=$number
 }
 
+## defproto NAME NUMBER
+##
+## Define $proto_NAME to be NUMBER.
+defproto () {
+  name=$1 number=$2
+  eval proto_$name=$number
+}
+
 m4_divert(38)m4_dnl
 ###--------------------------------------------------------------------------
 ### Utility chains (used by function definitions).
@@ -96,7 +104,9 @@ errorchain () {
   run ip46tables -t $table -A $chain -j LOG \
 	  -m limit --limit 3/minute --limit-burst 10 \
 	  --log-prefix "fw: $chain " --log-level notice
-  run ip46tables -t $table -A $chain -j "$@"
+  run ip46tables -t $table -A $chain -j "$@" \
+	  -m limit --limit 20/second --limit-burst 100
+  run ip46tables -t $table -A $chain -j DROP
 }
 
 m4_divert(24)m4_dnl