Sponsored Content
Full Discussion: Linux FAQ Items
Operating Systems Linux Gentoo Linux FAQ Items Post 302088233 by prashant_ohol on Sunday 10th of September 2006 06:29:44 PM
Old 09-10-2006
Power Protection From Syn-flooding

Hello,

Protect your machine from SYN-FLOODING

-A INPUT -i eth0 -p tcp --syn -j syn-flood
-A syn-flood -m limit --limit 50/s --limit-burst 50 -j RETURN
-A syn-flood -j DROP

hey guys and Make sure NEW tcp connections are SYN packets

-A INPUT -i eth0 -p tcp ! --syn -m state --state NEW -j REJECT


bingo Smilie


Prashant ohol - System Administrator
 

3 More Discussions You Might Find Interesting

1. Post Here to Contact Site Administrators and Moderators

Unix for Dummies FAQ

I have created a small FAQ for the "Unix for Dummies" forum. Hopefully this will be useful, as there are questions which are asked (and answered) repeatedly. <A HREF="http://www.droflet.net/unix_dot_com_faq.html">http://www.droflet.net/unix_dot_com_faq.html (0 Replies)
Discussion started by: PxT
0 Replies

2. Shell Programming and Scripting

awk between items including items

OS=HP-UX ksh The following works, except I want to include the <start> and <end> in the output. awk -F '<start>' 'BEGIN{RS="<end>"; OFS="\n"; ORS=""} {print $2} somefile.log' The following work in bash but not in ksh sed -n '/^<start>/,/^<end>/{/LABEL$/!p}' somefile.log (4 Replies)
Discussion started by: Ikon
4 Replies

3. Post Here to Contact Site Administrators and Moderators

Dead link in FAQ

Dead link from FAQ, then Technical FAQ: Senior Advisor - https://www.unix.com (Was about to suggest that a O/P read this FAQ). (9 Replies)
Discussion started by: methyl
9 Replies
synos(1)							Mail Avenger 0.8.3							  synos(1)

NAME
synos - guess operating system from TCP SYN fingerprint SYNOPSIS
synos [--mtu mtu] [--db path] syn-fingerprint DESCRIPTION
synos takes a SYN fingerprint, in the format described for the CLIENT_SYNFP environment variable in the avenger(1) man page, and outputs a guess as to the type of the client operating system. synos makes use of the OpenBSD SYN fingerprint database (which is also repackaged with Mail Avenger). OPTIONS --mtu val Certain operating systems set the initial TCP window size based on the maximum transmission unit, or MTU, of the network. For such operating systems, synos usually checks the window size using both the client's MSS option plus 40 bytes (for TCP and IP headers), or a hard-coded MTU, which defaults to 1,500 bytes. If either value works, the fingerprint is considered to match the operating system. You can change the value 1,500 by specifying this option. A value of 0 tells synos to use only the value derived from the MSS option. --db file Specifies an alternate location for the SYN fingerprint database. FILES
/usr/local/share/pf.os Default location of SYN fingerprint database. SEE ALSO
avenger(1), asmtpd(8) The Mail Avenger home page: <http://www.mailavenger.org/>. The OpenBSD home page: <http://www.openbsd.org/>. BUGS
The operating system type is determined by heuristics that are not always reliable. Moreover, not all operating systems can be distinguished. The database may not even contain a client's particular operating system and version. It is not hard to fool synos deliberately by changing TCP socket options or injecting raw packets onto the network. AUTHOR
David Mazieres Mail Avenger 0.8.3 2012-04-05 synos(1)
All times are GMT -4. The time now is 10:55 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy