> Source: [sk170148](https://support.checkpoint.com/results/sk/sk170148)

# sk170148 -  Rate Limiting rules for DoS do not work after reboot

| Property | Value |
|----------|-------|
| Solution ID | sk170148 |
| Date Created | 2020-11-21 |
| Last Modified | 2021-03-17 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81 (EOS) |
| OS | Gaia |

## Symptoms

- After configuration of Rate Limiting rules for DoS Mitigation according to [sk112454](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112454) and rebooting the Gateway, the configuration is not present in the system.

## Cause

The script *$FWDIR/conf/fwaccel_dos_rate_on_install* must have executable permissions.  
fwaccel_dos_rate_on_install should contain only IPv4-related commands.  
fwaccel6_dos_rate_on_install should contain only IPv6-related commands.  
"fw samp" or "fwaccel dos rate" commands must never be added to this file (they are saved automatically regardless).

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114) starting from Take 13
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 100
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 232
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 190

If you choose not to upgrade, to check that the load boot script is broken, run this script manually:  
`[Expert@GW:0]# fwaccel_dos_rate_load`  
``/opt/CPsuite-R80.30/fw1/bin/fwaccel_dos_rate_load: line 5: syntax error near unexpected token `<<<'``  
``/opt/CPsuite-R80.30/fw1/bin/fwaccel_dos_rate_load: line 5: `<<<<<<< HEAD'``   

In case the script is broken, the output is:  

`fwaccel_dos_rate_load`  

To fix this issue edit the */opt/CPsuite-R80.30/fw1/bin/fwaccel_dos_rate_load* file and remove the lines marked in grey:

1. **`[Expert@Gateway]# vi /opt/CPsuite-R80.30/fw1/bin/fwaccel_dos_rate_load`**

2. #!/bin/bash  

   #  
   # This shell script is invoked to install whitelist, penalty box whitelist,  
   **\<\<\<\<\<\<\< HEAD**  
   # policy into PPAK  
   **=======**  
   # and blacklist policy into PPAK  
   **\>\>\>\>\>\>\> Added DOS/Rate limiting policy to FW to enable connection counting without CPAQ messages**  
   #  

   # Load IPv4 whitelist from $FWDIR/conf/dos-whitelist-v4.conf  
   $FWDIR/bin/fwaccel dos whitelist -B  

   # Load IPv4 whitelist from $FWDIR/conf/pbox-whitelist-v4.conf  
   $FWDIR/bin/fwaccel dos pbox whitelist -B  

   # Load IPv4 blacklist from $FWDIR/conf/blacklists/\*  
   $FWDIR/bin/fwaccel dos blacklist -B  

   # Load IPv4 DOS/Rate Limiting config from $FWDIR/conf/fwaccel_dos_rate_on_install  
   $FWDIR/bin/fwaccel dos config -B  

   if \[\[ -e $FWDIR/bin/fwaccel6 \]\]; then  

   **Note:** This issue is present in R80.30 Jumbo HFA since take_215, and in Gaia 3.10 kernel USFW.  

<br />

**Related solution:** [sk112454 - How to configure Rate Limiting rules for DoS Mitigation (R80.20 and higher)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112454)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content