Browse Source

IP Limit Tweaks to reduce false bans (#850)

* IP Limit Tweaks to reduce false bans
1) Check IPs every 10s instead of 20s
2) F2B jail: maxretry 3 -> 4, findtime 100 -> 60

* USERS SHOULD UPDATE BANTIME ONCE AFTER UPDATE
to recreate jail for Ip Limit
somebodywashere 1 year ago
parent
commit
dd0217b46b
3 changed files with 6 additions and 6 deletions
  1. 2 2
      web/job/check_client_ip_job.go
  2. 2 2
      web/web.go
  3. 2 2
      x-ui.sh

+ 2 - 2
web/job/check_client_ip_job.go

@@ -130,8 +130,8 @@ func (j *CheckClientIpJob) processLogFile() {
 
 	}
 
-	// added 3 seconds delay before cleaning logs to reduce chance of logging IP that already has been banned
-	time.Sleep(time.Second * 3)
+	// added delay before cleaning logs to reduce chance of logging IP that already has been banned
+	time.Sleep(time.Second * 2)
 
 	if shouldCleanLog {
 		// copy access log to persistent file

+ 2 - 2
web/web.go

@@ -250,8 +250,8 @@ func (s *Server) startTask() {
 	// Check the inbound traffic every 30 seconds that the traffic exceeds and expires
 	s.cron.AddJob("@every 30s", job.NewCheckInboundJob())
 
-	// check client ips from log file every 20 sec
-	s.cron.AddJob("@every 20s", job.NewCheckClientIpJob())
+	// check client ips from log file every 10 sec
+	s.cron.AddJob("@every 10s", job.NewCheckClientIpJob())
 
 	// check client ips from log file every 3 day
 	s.cron.AddJob("@every 3d", job.NewClearLogsJob())

+ 2 - 2
x-ui.sh

@@ -713,8 +713,8 @@ enabled=true
 filter=3x-ipl
 action=3x-ipl
 logpath=${iplimit_log_path}
-maxretry=3
-findtime=100
+maxretry=4
+findtime=60
 bantime=${bantime}m
 EOF