Greetings !
Id be thankful if somebody can shed some light here:
If Iam getting a syn attack, and I have syn cookies enabled via sysctl
would any of these two rules match those connections?
iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above
10 --connlimit-mask 32 -j DROP
iptables -A INPUT -p tcp --syn --dport 80 -m hashlimit
--hashlimit-above 25/second --hashlimit-srcmask 32 --hashlimit-name
IP_LIMIT_REQ -j DROP
Or do these only apply to connections that have undergone the handshake?
Thanks
Alex
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
