firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error in section 'Protection against syn-flooding'.

Browse Source
This commit is contained in:
Christoph 2022-03-29 00:40:48 +02:00
parent 783be30197
commit ccb09d0095
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ip6t-firewall-gateway
View File

@ -490,8 +490,8 @@ if $protect6_against_several_attacks ; then
echononl "\t Protection against syn-flooding.."
if $drop6_syn_flood || $log_syn_flood ; then
$ip6t -N syn-flood
if $drop6_syn_flood || $log_syn_flood || $log_all ; then
$ip6t -N syn_flood
$ip6t -A INPUT -p tcp --syn -j syn_flood
$ip6t -A syn-flood -m limit --limit 1/second --limit-burst 3 -j RETURN
fi
@ -499,7 +499,7 @@ if $protect6_against_several_attacks ; then
$ip6t -A syn-flood -j $LOG_TARGET $tag_log_prefix "$log_prefix SYN flood: "
fi
if $drop6_syn_flood ; then
$ip6t -A syn-flood -j DROP
$ip6t -A syn_flood -j DROP
echo_done
else
echo_skipped

2
ipt-firewall-gateway
View File

@ -993,7 +993,7 @@ if $protect_against_several_attacks ; then
# ---
echononl "\t Protection against syn-flooding.."
if $drop_syn_flood || $log_syn_flood ; then
if $drop_syn_flood || $log_syn_flood || $log_all ; then
$ipt -N syn_flood
$ipt -A INPUT -p tcp --syn -j syn_flood
$ipt -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN