LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 08-22-2019, 08:51 AM   #1
battles
Member
 
Registered: Apr 2014
Distribution: Debian GNU/Linux 7.5 (wheezy)
Posts: 248

Rep: Reputation: Disabled
iptables


My iptables is setup to drop SYN flood records.
Code:
 *filter
:INPUT ACCEPT [2:169]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [35:4128]
:syn_flood - [0:0]

...

-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A syn_flood -m limit --limit 1/sec --limit-burst 3 -j RETURN
-A syn_flood -j DROP
My question is shouldn't the '-A syn_flood' lines come before the '-A INPUT'? Like:
Code:
-A syn_flood -m limit --limit 1/sec --limit-burst 3 -j RETURN 
-A syn_flood -j DROP
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
Thanks

Last edited by battles; 08-22-2019 at 09:08 AM.
 
Old 08-22-2019, 08:53 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 2,940

Rep: Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211Reputation: 1211
Try re-formatting your post using the CODE tags so that it's readable and you might get an answer.
 
Old 08-23-2019, 03:27 AM   #3
phil.d.g
Senior Member
 
Registered: Oct 2004
Posts: 1,262

Rep: Reputation: 135Reputation: 135
No, they don't need to come first.

However, where's the rest of the rules? From what you've posted there isn't going to be any syn flood protection.
 
Old 08-23-2019, 08:48 AM   #4
battles
Member
 
Registered: Apr 2014
Distribution: Debian GNU/Linux 7.5 (wheezy)
Posts: 248

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by phil.d.g View Post
No, they don't need to come first.

However, where's the rest of the rules? From what you've posted there isn't going to be any syn flood protection.
Yes, they are in there. I just didn't post them. Thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables error in android: iptables-save and iptables-restore not working preetb123 Linux - Mobile 5 04-11-2011 01:56 PM
iptables v1.2.9: Unknown arg `/sbin/iptables' Try `iptables -h' or 'iptables --help' Niceman2005 Linux - Security 4 12-29-2005 08:20 PM
IPtables Log Analyzer from http://www.gege.org/iptables/ brainlego Linux - Software 0 08-11-2003 06:08 AM
iptables book wich one can you pll recomment to be an iptables expert? linuxownt Linux - General 2 06-26-2003 04:38 PM
My iptables script is /etc/sysconfig/iptables. How do i make this baby execute on boo ForumKid Linux - General 3 01-22-2002 07:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration