The "connectban" Module
Description
This module Z-lines IP addresses which make excessive connections to the server.
Configuration
To load this module use the following <module> tag:
<module name="connectban">
<connect>
This module extends the core <connect> tags with the following fields:
| Name | Type | Default Value | Description |
|---|---|---|---|
| useconnectban | Boolean | yes | New in v3.9.0! Whether to ban users in this class for making excessive connections to the server. |
Example Usage
Disables excessive connection bans for users in the BNC class:
<connect name="BNC"
...
useconnectban="no">
<connectban>
The <connectban> tag defines settings about how the connectban module should behave. This tag can only be defined once.
| Name | Type | Default Value | Description |
|---|---|---|---|
| threshold | Number | 10 | The number of times that an IP address can connect within an hour. |
| banmessage | Text | Your IP range has been attempting to connect too many times in too short a duration. Wait a while, and you will be able to connect. | The message to give to clients that are connect banned. |
| banduration (since 3.13.0) duration (3.0.0 to 3.12.0) | Duration | 6h (since 3.13.0) 10m (3.0.0 to 3.12.0) | The duration that an IP address should be banned for. |
| ipv4cidr | Number | Depends on <cidr:ipv4clone> (since 3.13.0)32 (3.0.0 to 3.12.0) | The IPv4 CIDR range to treat as equivalent when looking for excessive connections. |
| ipv6cidr | Number | Depends on <cidr:ipv6clone> (since 3.13.0)128 (3.0.0 to 3.12.0) | The IPv6 CIDR range to treat as equivalent when looking for excessive connections. |
| bootwait | Duration | 2m | The time period to wait after starting up before enforcing connection bans. |
| splitwait | Duration | 2m | The time period to wait after a netsplit before enforcing connection bans. |
Example Usage
<connectban threshold="10"
banmessage="Your IP range has been attempting to connect too many times in too short a duration. Wait a while, and you will be able to connect."
banduration="6h"
ipv4cidr="32"
ipv6cidr="128"
bootwait="2m"
splitwait="2m">