Alin Nastac
d8748e537f
netfilter: add iptables-mod-rpfilter package ...
Unlike /proc/sys/net/ipv4/conf/INTF/rp_filter flag, rule iptables -t raw
-I PREROUTING -m rpfilter --invert -j DROP prevents conntrack table to
become full when a packet flood with randomly selected source IP addresses
is received from the lan side.
Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2017-07-11 22:09:57 +02:00
2017-05-27 07:54:40 +02:00
2016-12-22 16:42:21 +01:00
2017-05-25 19:01:08 +02:00
2016-12-16 22:39:22 +01:00
2017-05-16 16:58:15 +02:00
2016-12-16 22:39:22 +01:00
2017-02-15 11:28:57 +01:00
2017-02-26 08:41:08 +01:00
2016-12-16 22:39:22 +01:00
2017-03-20 08:25:33 +01:00
2017-05-30 14:00:31 +02:00
2017-05-16 16:58:07 +02:00
2017-07-11 22:09:57 +02:00
2016-12-16 22:39:22 +01:00
2017-03-25 13:46:21 +01:00
2017-03-14 13:29:03 +01:00
2017-01-10 13:01:26 +01:00
2016-12-16 22:39:22 +01:00
2016-10-15 11:36:52 +02:00
2016-12-22 16:42:21 +01:00
2016-10-15 11:36:52 +02:00
2016-10-15 11:36:52 +02:00
2017-03-01 17:19:52 -08:00
2017-03-22 09:16:23 +01:00
2017-01-13 12:08:08 +01:00
2017-01-13 12:08:09 +01:00
2017-02-28 20:22:10 +01:00
2016-12-16 22:39:22 +01:00
2017-05-25 19:01:08 +02:00
2017-03-12 15:06:50 +01:00
d8748e537f