This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
сервис_firewall [2024/05/05 19:07] val [Debian/Ubuntu (iptables)] |
сервис_firewall [2024/05/07 14:14] val [Debian/Ubuntu (iptables)] |
||
---|---|---|---|
Line 404: | Line 404: | ||
==== Debian/Ubuntu (iptables) ==== | ==== Debian/Ubuntu (iptables) ==== | ||
+ | |||
+ | === Ограничение частоты подключений === | ||
<code> | <code> | ||
root@gate:~# cat firewall.sh | root@gate:~# cat firewall.sh | ||
Line 412: | Line 414: | ||
iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 4 -j DROP | iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 4 -j DROP | ||
iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --set | iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --set | ||
+ | |||
+ | #iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 1 --hitcount 10 -j LOG | ||
+ | #iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 1 --hitcount 10 -j DROP | ||
+ | #iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --set | ||
... | ... | ||
</code><code> | </code><code> | ||
root@gate:~# tail -f /var/log/syslog | root@gate:~# tail -f /var/log/syslog | ||
+ | root@gate:~# journalctl -f | ||
root@gate:~# cat /proc/net/xt_recent/DEFAULT | root@gate:~# cat /proc/net/xt_recent/DEFAULT | ||
+ | root@gate:~# watch cat /proc/net/xt_recent/DEFAULT | ||
root@gate:~# echo -10.5.7.1 >/proc/net/xt_recent/DEFAULT | root@gate:~# echo -10.5.7.1 >/proc/net/xt_recent/DEFAULT |