Differences

This shows you the differences between two versions of the page.

--- сервис_firewall [2024/04/26 12:08]
val [CentOS]
+++ сервис_firewall [2024/05/07 12:03]
val [Debian/Ubuntu (iptables)]
@@ Line 415: / Line 415: @@
 </code><code>
 root@gate:~# tail -f /var/log/syslog
+root@gate:~# journalctl -f
 root@gate:~# cat /proc/net/xt_recent/DEFAULT
@@ Line 423: / Line 424: @@
 </code>
+==== nftables ====
+  * [[https://access.redhat.com/documentation/ru-ru/red_hat_enterprise_linux/7/html/security_guide/sec-using_nftables_to_limit_the_amount_of_connections|Using nftables to limit the amount of connections]]
+<code>
+gate# cat /etc/nftables.conf
+</code><code>
+...
+table inet filter {
+        set denylist {
+                type ipv4_addr
+                size 65535
+                flags dynamic,timeout
+                timeout 5m
+        }
+...
+        chain forward {
+                type filter hook forward priority filter; policy accept;
+                ip protocol tcp ct state new,untracked limit rate over 10/second add @denylist { ip saddr }
+                ip saddr @denylist drop
+        }
+...
+</code>
 ==== FreeBSD (pf) ====

Методические материалы Лохтурова Вячеслава