Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?

On 01/11/2018 02:10 AM, teor wrote:

So if you're going to do this, please set a much higher limit than 2. I would suggest at least 4, but 10 or more is better.

You might be able to set it higher if you put a limit on repeated connection attempts.

The simple approach (allowing 8 syn requests from an address at ORport and at DirPort respectively) worked flawlessley for a while - just few dozen/hundreds DROPs per hour. Since yesterday however I get > 100K DROPs per hour.

Could a side effect of that traffic be that I lost the Exit flag ?