smurf attack

sulekha · 03-17-2012, 04:01 AM

Hi all,

I have set the following iptable rule in my server with the ip address 192.168.0.210

to prevent flooding a network with ping messages only allow 1 ping request/second

soln:- iptables -A INPUT -p icmp -m icmp -m limit --limit 1/second -j ACCEPT

However the above rule is not working

i am still able to do ping s such as ping -i .2 192.168.0.210

How to modify the iptable rule to prevent these sort of pings ?

Celyr · 03-17-2012, 05:44 AM

I think that it's working, you just need another rule to drop the packets that are outside the limit like:

Code:

Iptables -A INPUT -p icmp -m icmp -J DROP

Anyway this won't protect you by ddos, ask your provider to apply ddos mitigation