diff options
| author | Silvino Silva <silvino@bk.ru> | 2016-09-15 03:04:12 +0100 |
|---|---|---|
| committer | Silvino Silva <silvino@bk.ru> | 2016-09-15 03:04:12 +0100 |
| commit | 91d229b5e4491451b6f728f644faee993f8c79c8 (patch) | |
| tree | f0aad9b4d011f099fa182dd58a451066d7039152 /core/scripts/iptables.sh | |
| parent | 07bedee34d9ded6f86904c7e4b4e02464ff8cb14 (diff) | |
| download | doc-91d229b5e4491451b6f728f644faee993f8c79c8.tar.gz | |
core packages revision, iptables and added ports collections
Diffstat (limited to 'core/scripts/iptables.sh')
| -rw-r--r-- | core/scripts/iptables.sh | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 9fb2872..2931c8c 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -193,6 +193,7 @@ $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP $IPT -A INPUT -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # NULL packets +$IPT -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " $IPT -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j DROP $IPT -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " |