Iptables - Hashlimit Module

Aus QBWiki
Zur Navigation springenZur Suche springen



iptables -L -nv

  1. INPUT Policy = DROP
1 iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -m hashlimit --hashlimit-name SSH_LIMIT1 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-above 5/minute --hashlimit-burst 2 --hashlimit-htable-expire 30000 -j ACCEPT
2 iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j DROP