|
@@ -534,6 +534,7 @@ iptables -A INPUT -p udp --destination-port 2000:2001 -j DROP
|
534
|
534
|
iptables -A INPUT -p udp --destination-port 12345 -j DROP
|
535
|
535
|
iptables -A INPUT -p udp --destination-port 32771:32774 -j DROP
|
536
|
536
|
iptables -A INPUT -p udp --destination-port 4000 -j DROP
|
|
537
|
+iptables -A INPUT -p udp --destination-port 119 -j DROP
|
537
|
538
|
|
538
|
539
|
# Make sure NEW incoming tcp connections are SYN packets
|
539
|
540
|
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
|
|
@@ -563,9 +564,6 @@ iptables -A INPUT -p tcp --dport 443 -m limit --limit 10/minute --limit-burst 1
|
563
|
564
|
# Limit number of XMPP connections
|
564
|
565
|
iptables -A INPUT -p tcp --match multiport --dports 5222:5223,5269,5280:5281 -m limit --limit 10/minute --limit-burst 1 -j ACCEPT
|
565
|
566
|
|
566
|
|
-# Limit NNTP connections
|
567
|
|
-iptables -A INPUT -p tcp --dport 119 -m limit --limit 5/minute --limit-burst 1 -j ACCEPT
|
568
|
|
-
|
569
|
567
|
# Limit IRC connections
|
570
|
568
|
iptables -A INPUT -p tcp --dport 6666:6670 -m limit --limit 10/minute --limit-burst 1 -j ACCEPT
|
571
|
569
|
|