Update default action and timeout for nfqueue

2019-05-22 16:08:15 +02:00
parent 5eb956a9c3
commit f0decfa633
1 changed files with 1 additions and 1 deletions
--- a/firewall/interception/nfqueue/nfqueue.go
+++ b/firewall/interception/nfqueue/nfqueue.go
@@ -47,7 +47,7 @@ func NewNFQueue(qid uint16) (nfq *NFQueue, err error) {
 	if os.Geteuid() != 0 {
 		return nil, errors.New("must be root to intercept packets")
 	}
-	nfq = &NFQueue{DefaultVerdict: NFQ_ACCEPT, Timeout: 100 * time.Millisecond, qid: qid, qidptr: &qid}
+	nfq = &NFQueue{DefaultVerdict: NFQ_DROP, Timeout: 3000 * time.Millisecond, qid: qid, qidptr: &qid}
 	queues[nfq.qid] = nfq

 	err = nfq.init()