ipt-gateway

T

chris 8058eedf61 default_basic_behavior.conf: take of SYN FLOOD Rules. Disable SYN flood rule by default (IPv4 + IPv6)

The global limit (1 SYN/s, burst 3, no per-source tracking) dropped
legitimate TCP connections to the gateway itself (up to ~45% on busy
gateways: DNS zone transfers, SSH, monitoring), and a few SYNs per
second were enough to lock out all TCP access. Kernel SYN cookies
(tcp_syncookies) already provide proper SYN flood protection.

2026-10-30 22:22:03 +01:00

conf

default_basic_behavior.conf: take of SYN FLOOD Rules. Disable SYN flood rule by default (IPv4 + IPv6)

2026-10-30 22:22:03 +01:00

.gitignore

FIX DNS Rules: allow protocol tcp for requesting large records.

2017-06-02 12:09:10 +02:00

INSTALL

Adjust INSTALL docu.

2019-04-03 13:13:11 +02:00

ip6t-firewall-gateway

Adjust firewall scripts to support NTP TCO/4460.

2026-09-09 15:43:30 +02:00

ipt-firewall-gateway

Adjust firewall scripts to support NTP TCO/4460.

2026-09-09 15:43:30 +02:00