Is it possible to add information to an email message which rule worked for a given ddos block, including, for example, the configuration settings in brackets?
threshold_tcp_mbps = 90000
threshold_udp_mbps = 7500
threshold_icmp_mbps = 1000
threshold_tcp_pps = 58000
threshold_udp_pps = 20000
threshold_icmp_pps = 2000
Thanks