The unified diff between revisions [4c883eb4..] and [fff0894a..] is displayed below. It can also be downloaded as a raw diff.

This diff has been restricted to the following files: 'options.h'

#
#
# patch "options.h"
#  from [458cad58f22fe5b0e6ba44bbe9f1820d81f50314]
#    to [1d5e35e7d324996263755fb34439e4b91c5b0c00]
#
============================================================
--- options.h	458cad58f22fe5b0e6ba44bbe9f1820d81f50314
+++ options.h	1d5e35e7d324996263755fb34439e4b91c5b0c00
@@ -161,6 +161,13 @@ etc) slower (perhaps by 50%). Recommende

 /* Specify the number of clients we will allow to be connected but
  * not yet authenticated. After this limit, connections are rejected */
+/* The first setting is per-IP, to avoid denial of service */
+#ifndef MAX_UNAUTH_PER_IP
+#define MAX_UNAUTH_PER_IP 5
+#endif
+
+/* And then a global limit to avoid chewing memory if connections
+ * come from many IPs */
 #ifndef MAX_UNAUTH_CLIENTS
 #define MAX_UNAUTH_CLIENTS 30
 #endif