Iptables - Hashlimit Module

Aus QBWiki
Zur Navigation springenZur Suche springen



iptables -L -nv


  1. INPUT Policy = DROP

iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -m hashlimit --hashlimit-name SSH_LIMIT1 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-above 5/minute --hashlimit-burst 2 --hashlimit-htable-expire 30000 -j ACCEPT


iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j DROP