From d030827f1298c95b95f62d6b633e62964669a184 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Sun, 6 Oct 2019 18:27:45 +0300
Subject: [PATCH] roles/common: Relax SSH rate limit in firewalld

Now that I'm blocking ~10,000 malicious IPs from AbuseIPDB I feel
more comfortable using a more relaxed rate limit for SSH. A limit
of 12 per minute is about one every five seconds.
---
 roles/common/templates/public.xml.j2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/common/templates/public.xml.j2 b/roles/common/templates/public.xml.j2
index e04ac04..df2e3bf 100644
--- a/roles/common/templates/public.xml.j2
+++ b/roles/common/templates/public.xml.j2
@@ -8,7 +8,7 @@
         <source address="0.0.0.0/0"/>
         <port protocol="tcp" port="22"/>
         <accept>
-            <limit value="5/m"/>
+            <limit value="12/m"/>
         </accept>
     </rule>
 
@@ -17,7 +17,7 @@
         <source address="::/0"/>
         <port protocol="tcp" port="22"/>
         <accept>
-            <limit value="5/m"/>
+            <limit value="12/m"/>
         </accept>
     </rule>