Hello everybody,
I am looking for a way to accept traffic from clients only if they were
seen at least twice. This shall be part of a firewall concept which
protects the target from random floods where source IPs are usually only
seen once since they are random.
I cannot use the --state ESTABLISHED here because this requires a
complete handshake (for TCP). I'm okay with the first packet not
matching this rule as long as the 2nd one does. I'm looking forward to
reading your ideas!
Best,
Jeff
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
