öàªèÒ »ÃÐàÀ·µèÒ§æ
öàªèÒ ¨Ñ§ËÇÑ´
â´¹àµçÁæ UDP Flood
Çѹ·Õè: 05/11/2013
àÇÅÒ: 08:06:11
# UDP-Flooding protection
iptables -N BLOCKFLOOD
iptables -A BLOCKFLOOD -m limit --limit 2/minute --limit-burst 2 -j DROP
iptables -A BLOCKFLOOD -j DROP
iptables -I INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -I OUTPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -I FORWARD -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
Run Firewall ¼èÒ¹áÅéǤÃѺ ¢Íº¤Ø³¤ÃѺ ;D
¡ÓÅѧÃÍ´Ù user ÇèÒ¨ÐÁÒäÁéä˹ÍÕ¡ ÍÔÍÔ
iptables -N BLOCKFLOOD
iptables -A BLOCKFLOOD -m limit --limit 2/minute --limit-burst 2 -j DROP
iptables -A BLOCKFLOOD -j DROP
iptables -I INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -I OUTPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -I FORWARD -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
Run Firewall ¼èÒ¹áÅéǤÃѺ ¢Íº¤Ø³¤ÃѺ ;D
¡ÓÅѧÃÍ´Ù user ÇèÒ¨ÐÁÒäÁéä˹ÍÕ¡ ÍÔÍÔ
¤ÇÒÁ¤Ô´àËç¹·Ñé§ËÁ´
ÂѧäÁèÁÕ¤ÇÒÁ¤Ô´àËç¹ ÁÒÃèÇÁáÊ´§¤ÇÒÁ¤Ô´àËç¹à»ç¹¤¹ááÊÔ!