Notify Me a écrit : > > *filter > :FORWARD DROP [0:0] > -A FORWARD -i eth0 -p tcp -m state --state NEW -m recent --set --name > DEFAULT --rsource > -A FORWARD -i eth0 -p tcp -m state --state NEW -m recent --update > --seconds 30 --hitcount 10 --name DEFAULT --rsource -j DROP No ACCEPT here, so this ruleset drops all packets in the FORWARD chain. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
