how to filter

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,
   
  i wish any one help me on filtering syn-flood for
the forward packets. as i have used iptables with
limit:

$IPTABLES -N syn-flood
    $IPTABLES -A FORWARD -p tcp --syn -j syn-flood
$IPTABLES -A syn-flood -m limit --limit 1/s
--limit-burst 4 -j RETURN
    $IPTABLES -A syn-flood -j DROP
 i have faced problem with surfing when there are lots
of subscribers. when i increased limit rule then again
it gives problem during less no. of subscribers.

Could any one help me out from this sort of problem.
Any help will be apprieciated.

Rgrds,
John

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux