�� iptables �� -�� (1)

Sat, 07 Sep 2013 15:31:33 GMT

� ��

#Allow rel, estb#
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

#Rules#
iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT

2-4 �� ? (�.�. �� , �� ...)

� �� :
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

�� whitelist
��
iptables -I INPUT -m conntrack --ctstate NEW -p tcp ! --syn -j DROP
#Deny SFTP brut#
iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --name SFTP_BRUTE --set
iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --name SFTP_BRUTE --update --seconds 30 --hitc

�� iptables �� -�� (cssua)

Fri, 06 Sep 2013 23:47:52 GMT

> iptables -A INPUT -p tcp --dport 80 -m limit --limit 50/minute --
> 200 -j ACCEPT
> iptables -A INPUT -p tcp --dport 443 -m limit --limit 25/minute --limit-burst
> 100 -j ACCEPT

�� (�� ).

OpenForum RSS: ������� iptables ��� ���-�������

������� iptables ��� ���-������� (1)

������� iptables ��� ���-������� (cssua)

OpenForum RSS: �� iptables �� -��

�� iptables �� -�� (1)

�� iptables �� -�� (cssua)