I have to know the Explanation for DoS IPtables Rule.?

Ganeshgm7 · 08-22-2015, 08:18 AM

Guys I have trying to prevent my system from DoS attack. I google it, and find a IPtables code. But i don't the meaning for this code. What the rule was doing.? Please tell me clearly About the Rule.

Quote:

iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT

I want to know what is the meaning for this : limit --limit 25/minute --limit-burst 100

Thanks in advance..

EurekaHeSaid · 08-22-2015, 11:08 PM

Here's a full explanation https://www.frozentux.net/iptables-t...tml#LIMITMATCH

JaseP · 08-23-2015, 12:08 AM

Quote:

Originally Posted by Ganeshgm7

Guys I have trying to prevent my system from DoS attack.

You can mitigate the attack (a DDoS attack),... but it is impossible to absolutely stop it, unfortunately. If you have an outward facing IP address that others can readily discern, and they are looking to attack you (specifically), the things you can do on your box to mitigate it are somewhat limited. Your ISP can help (or should), if it continues to become a problem.

ericson007 · 08-23-2015, 12:38 AM

That is a very nice link you have there. Technical but explained in laymans terms.

EurekaHeSaid · 08-24-2015, 05:59 AM

Quote:

Originally Posted by ericson007

That is a very nice link you have there. Technical but explained in laymans terms.

I found it on the netfilter.org tutorial section. There you can find lots of other documentation about iptables