[Linux] Some Usefull Iptables

[Ekt]

Here I leave some IPTABLES can be usefull for Some DDOS and blocking some floods.
NOTE: Use this IPtables one by one.

iptables -N syn-flood
iptables -A syn-flood -m limit --limit 10/second --limit-burst 50 -j RETURN
iptables -A syn-flood -j LOG --log-prefix "SYN flood: "
iptables -A syn-flood -j DROP
iptables -A INPUT -f -j DROP
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
iptables -A syn-flood -m recent --name blacklist --set -j DROP

Please leave a comment

 

[Fyruz]

Thanks 4 sharing