Home

Table of Contents

• Iptable
  • Restricting
  • explain with chart
  • Iptable command-line example
  • Iptable help

Iptable

Restricting

• http://ipset.netfilter.org/iptables-extensions.man.html#lbAY

• https://netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html

       rate (pkt/s)
             ^        .---.
             |       / DoS \
             |      /       \
Edge of DoS -|.....:.........\.......................
 = (limit *  |    /:          \
limit-burst) |   / :           \         .-.
             |  /  :            \       /   \
             | /   :             \     /     \
End of DoS  -|/....:..............:.../.......\..../.
 = limit     |     :              :`-'         `--'
-------------+-----+--------------+------------------> time (s)
   LOGIC =>  Match | Didn't Match |    Match

explain with chart

http://www.zsythink.net/archives/1199

Iptable command-line example

https://dotblogs.com.tw/ghoseliang/2012/10/05/75289

Iptable help

• https://manpages.debian.org/unstable/iptables/iptables.8.en.html

• http://ipset.netfilter.org/iptables-extensions.man.html