LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 07-02-2015, 03:54 AM   #1
secrets88
LQ Newbie
 
Registered: Jun 2015
Posts: 17
Blog Entries: 1

Rep: Reputation: Disabled
iptables / scan port


Hello ,
I am traying to secure my firewall and i found this scan but i did not understand what does it mean :
iptables -t filter -N ??
and also what he rule of -j RETURN

# SYN-FLOODING
iptables -t filter -N syn-flood
iptables -t filter -A INPUT -i eth0 -p tcp --syn -j syn-flood
iptables -t filter -A syn-flood -m limit --limit 1/sec --limit-burst 4 -j RETURN
iptables -t filter -A syn-flood '-j LOG \--log-prefix "IPTABLES SYN-FLOOD:"'
iptables -t filter -A syn-flood -j DROP


and also when i add this lines i had a lot of problems (performance , blocking access to the others servers ... )

thanks
 
Old 07-02-2015, 02:24 PM   #2
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Quote:
Originally Posted by secrets88 View Post
iptables -t filter -N syn-flood
Cheat a new chain

Quote:
iptables -t filter -A syn-flood -m limit --limit 1/sec --limit-burst 4 -j RETURN
If packets are 1 a second or no more then 4 a second return to the original jump point else do the following

Quote:
iptables -t filter -A syn-flood '-j LOG \--log-prefix "IPTABLES SYN-FLOOD:"'
iptables -t filter -A syn-flood -j DROP
Quote:
and also when i add this lines i had a lot of problems (performance , blocking access to the others servers ... )

thanks
What is the rule that jumps to this new chain? Sounds like it was working. But unless you show your rules I cannot tell you where you could improve them.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Port scan shows ports open despite default iptables rule to DROP welshdemon Linux - Security 18 02-17-2014 07:30 AM
iptables port scan jindalarpan Linux - Security 3 07-17-2013 08:52 AM
Nessus scan and no port scan possible? memo007 Linux - Security 1 09-08-2008 06:21 PM
iptables and port scan Ammad Linux - Security 2 06-12-2007 03:11 PM
Port Scan Detectors for IPTables Artimus Linux - Security 3 03-03-2003 04:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration