User Tools

Site Tools


сервис_firewall

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
сервис_firewall [2024/05/05 19:07]
val [Debian/Ubuntu (iptables)]
сервис_firewall [2024/05/07 14:14]
val [Debian/Ubuntu (iptables)]
Line 404: Line 404:
  
 ==== Debian/​Ubuntu (iptables) ==== ==== Debian/​Ubuntu (iptables) ====
 +
 +=== Ограничение частоты подключений ===
 <​code>​ <​code>​
 root@gate:​~#​ cat firewall.sh root@gate:​~#​ cat firewall.sh
Line 412: Line 414:
 iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 4 -j DROP iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 4 -j DROP
 iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --set iptables -A FORWARD -p tcp --dport 80 -i eth1 -m conntrack --ctstate NEW -m recent --set
 +
 +#iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 1 --hitcount 10 -j LOG
 +#iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --update --seconds 1 --hitcount 10 -j DROP
 +#iptables -A FORWARD -p tcp -i eth1 -m conntrack --ctstate NEW -m recent --set
 ... ...
 </​code><​code>​ </​code><​code>​
 root@gate:​~#​ tail -f /​var/​log/​syslog root@gate:​~#​ tail -f /​var/​log/​syslog
 +root@gate:​~#​ journalctl -f
  
 root@gate:​~#​ cat /​proc/​net/​xt_recent/​DEFAULT root@gate:​~#​ cat /​proc/​net/​xt_recent/​DEFAULT
 +root@gate:​~#​ watch cat /​proc/​net/​xt_recent/​DEFAULT
  
 root@gate:​~#​ echo -10.5.7.1 >/​proc/​net/​xt_recent/​DEFAULT root@gate:​~#​ echo -10.5.7.1 >/​proc/​net/​xt_recent/​DEFAULT
сервис_firewall.txt · Last modified: 2024/05/07 16:18 by val