rfxn / advanced-policy-firewall

Advanced Policy Firewall (APF)
GNU General Public License v2.0
93 stars 46 forks source link

Slower word-wide pings with APF enabled #13

Closed AlexShapka closed 6 years ago

AlexShapka commented 8 years ago

When APF is enabled the http://www.host-tracker.com gives lot's of Bad and Warn pings. As soon as I disable APF it starts giving Good pings for my websites. I understand that this is probably about APF preventing too frequent ping requests, nevertheless I hope it is possible to make APF differ simple pings from malicious requests as otherwise it is giving really bad performance impression when users check their websites through http://www.host-tracker.com.

AlexShapka commented 8 years ago

Changing ICMP_LIM value from 30 to 120 seconds returns all good results. 100 s gives couple Warns. I am not sure how 120 is bad in comparison to 30 s, but if it's ok then this value should be set by default as lot's of APF users out there could be hitting this issue.