Forum

> > CS2D > Servers > about iptables
ForenübersichtCS2D-Übersicht Servers-ÜbersichtEinloggen, um zu antworten

Englisch about iptables

7 Antworten
Zum Anfang Vorherige 1 Nächste Zum Anfang

alt about iptables

sheeL
User Off Offline

Zitieren
Hello,

This IPTables code can protect my server from DoS/DDoS attack's?

1
2
3
iptables -A INPUT -p tcp --syn -m limit --limit 1 /s --limit-burst 8 -j DROP
iptables -A INPUT -p udp -m length --length 0:28 -j DROP
iptables -A INPUT -p udp -m length --length 278:428 -j DROP

Thanks

alt Re: about iptables

x223112
User Off Offline

Zitieren
Maybe it will save u from DoS/DDoS attacks.. But it wont protect your from Rocket! MUHAHAHAHHA!

alt Re: about iptables

sheeL
User Off Offline

Zitieren
user x223112 hat geschrieben
Maybe it will save u from DoS/DDoS attacks.. But it wont protect your from Rocket! MUHAHAHAHHA!


Rocket? what lol

alt Re: about iptables

RDN
BANNED Off Offline

Zitieren
1
iptables -A INPUT -p tcp --syn -m limit --limit 1 /s --limit-burst 8 -j DROP
this not protect because here no udp
1
iptables -A INPUT -p udp -m length --length 0:28 -j DROP
this too not protect because small packets do not break the server
1
iptables -A INPUT -p udp -m length --length 278:428 -j DROP
it can protect on 10%

alt Re: about iptables

sheeL
User Off Offline

Zitieren
user RDN hat geschrieben
1
iptables -A INPUT -p tcp --syn -m limit --limit 1 /s --limit-burst 8 -j DROP
this not protect because here no udp
1
iptables -A INPUT -p udp -m length --length 0:28 -j DROP
this too not protect because small packets do not break the server
1
iptables -A INPUT -p udp -m length --length 278:428 -j DROP
it can protect on 10%


Serious? You are trying to bring down my server @Rodion -.-

alt Re: about iptables

EngiN33R
Moderator Off Offline

Zitieren
@user sheeL: Actually his advice is sound, I don't really see the reason to be as paranoid as you are. If you don't believe him, check the syntax yourself for any malicious flags that you seem to think are there.

alt Re: about iptables

DC
Admin Off Offline

Zitieren
The second rule makes sense. It's not about small packets but about completely empty packets without any payload (28 is the size of the UDP+IP headers). I highly recommend to use this rule.
Zum Anfang Vorherige 1 Nächste Zum Anfang
Einloggen, um zu antworten Servers-ÜbersichtCS2D-ÜbersichtForenübersicht