[Fesih BICER]

Uygulamanın sorunsuz çalışması için POM kurulu olduğundan emin olun.

LOG Syn-flood Denial of Service attempts - 10 per hour

iptables -A FORWARD -p tcp --syn -m limit --limit 10/h \
  -j LOG --log-prefix 'Syn-flood attack??? '

Syn-flood protection

iptables -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT

LOG Furtive Port Scanner attempts - 10 per hour

iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST \
  -m limit --limit 10/h -j LOG --log-prefix 'Port Scanner attack??? '

Port Scanner protection

iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST \
  -m limit --limit 1/s -j ACCEPT

LOG Ping of Death Denial of Service attempts - 10 per hour

iptables -A FORWARD -p icmp --icmp-type echo-request \
  -m limit --limit 10/h -j LOG --log-prefix 'Ping of Death attack??? '

Ping of Death protection

iptables -A FORWARD -p icmp --icmp-type echo-request \
  -m limit --limit 1/s -j ACCEPT

Kaynak: www.netfilter.org