firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error in section 'Protection against syn-flooding'.

Browse Source
This commit is contained in:
Christoph 2022-03-29 00:40:48 +02:00
parent 783be30197
commit ccb09d0095
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ip6t-firewall-gateway
View File

@ -490,8 +490,8 @@ if $protect6_against_several_attacks ; then
echononl "\t Protection against syn-flooding.." echononl "\t Protection against syn-flooding.."
if $drop6_syn_flood || $log_syn_flood ; then if $drop6_syn_flood || $log_syn_flood || $log_all ; then
$ip6t -N syn-flood $ip6t -N syn_flood
$ip6t -A INPUT -p tcp --syn -j syn_flood $ip6t -A INPUT -p tcp --syn -j syn_flood
$ip6t -A syn-flood -m limit --limit 1/second --limit-burst 3 -j RETURN $ip6t -A syn-flood -m limit --limit 1/second --limit-burst 3 -j RETURN
fi fi
@ -499,7 +499,7 @@ if $protect6_against_several_attacks ; then
$ip6t -A syn-flood -j $LOG_TARGET $tag_log_prefix "$log_prefix SYN flood: " $ip6t -A syn-flood -j $LOG_TARGET $tag_log_prefix "$log_prefix SYN flood: "
fi fi
if $drop6_syn_flood ; then if $drop6_syn_flood ; then
$ip6t -A syn-flood -j DROP $ip6t -A syn_flood -j DROP
echo_done echo_done
else else
echo_skipped echo_skipped

2
ipt-firewall-gateway
View File

@ -993,7 +993,7 @@ if $protect_against_several_attacks ; then
# --- # ---
echononl "\t Protection against syn-flooding.." echononl "\t Protection against syn-flooding.."
if $drop_syn_flood || $log_syn_flood ; then if $drop_syn_flood || $log_syn_flood || $log_all ; then
$ipt -N syn_flood $ipt -N syn_flood
$ipt -A INPUT -p tcp --syn -j syn_flood $ipt -A INPUT -p tcp --syn -j syn_flood
$ipt -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN $ipt -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN