0

I have been searching for some basic IPTABLES protection agains Syn attacks and floods I have found thise commands:

iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP //syn protect
iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP //xmas packets protect

Will they really help to stop these kind of attacks ?

1 Answer 1

1

Well, They are filters that block specific types of (D)DOS attacks, so yes. They are by no means a panacea however, as there are many ways to DOS/DDOS a server, at the IP layer or higher.

There are filters for several other forms of DOS attack here: http://www.cyberciti.biz/tips/linux-iptables-10-how-to-block-common-attack.html

I recommend you look into Bucket filtering, as an approach to rate-limiting packets of certain types. https://en.wikipedia.org/wiki/Token_bucket

https://en.wikipedia.org/wiki/Leaky_bucket

More info on Rate limiting in IPTables here: http://www.cyberciti.biz/tips/howto-limit-linux-syn-attacks.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .