Displaying 1 result from an estimated 1 matches for "bad_tcp".
Did you mean:
bad_nc
2005 Dec 27
3
Ingress policing (matching netfilter marks)
...echo 0 > $i
done
########
######## 4. rules set up.
########
######## 4.1 Filter table
#### 4.1.1 Set policies
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT DROP
$IPTABLES -P FORWARD DROP
#### 4.1.2 Create userspecified chains
# Create chain for bad tcp packets
$IPTABLES -N bad_tcp
# Create separate chains for ICMP, TCP and UDP to traverse
$IPTABLES -N tcp_packets
$IPTABLES -N udp_packets
$IPTABLES -N icmp_packets
$IPTABLES -N common
#### 4.1.3 Create content in userspecified chains
# bad_tcp chain
$IPTABLES -A bad_tcp -p tcp --tcp-flags SYN,ACK SYN,ACK -m state
-...