Re: [arch-general] IPTables DDoS

2010-07-20 Thread Greg Bur
On Mon, 2010-07-19 at 22:43 +0530, Nilesh Govindarajan wrote: > Hi, > Can someone tell me how to use IPTables to prevent DDoS attacks? > I'm sure IPTables has the relevant modules (limit, recent I think) > after reading some docs, but still in doubt about its implementation. > I realize I am late

Re: [arch-general] IPTables DDoS

2010-07-20 Thread Nilesh Govindarajan
On Tue, Jul 20, 2010 at 6:55 PM, vlad wrote: > On Tue, Jul 20, 2010 at 06:47:00PM +0530, Nilesh Govindarajan wrote: >> On Tue, Jul 20, 2010 at 1:21 PM, vlad wrote: >> > Hello, >> > >> > The recent module is good for that: >> > http://www.sollers.ca/blog/2008/iptables_recent >> > http://www.google

Re: [arch-general] IPTables DDoS

2010-07-20 Thread vlad
On Tue, Jul 20, 2010 at 06:47:00PM +0530, Nilesh Govindarajan wrote: > On Tue, Jul 20, 2010 at 1:21 PM, vlad wrote: > > Hello, > > > > The recent module is good for that: > > http://www.sollers.ca/blog/2008/iptables_recent > > http://www.google.com/search?q=iptables+recent > > I have in my fw scri

Re: [arch-general] IPTables DDoS

2010-07-20 Thread Nilesh Govindarajan
On Tue, Jul 20, 2010 at 1:21 PM, vlad wrote: > Hello, > > The recent module is good for that: > http://www.sollers.ca/blog/2008/iptables_recent > http://www.google.com/search?q=iptables+recent > I have in my fw script: > " >  $TABLES -A limitations -m recent --name RECENT_FILTER --set >  $TABLES -

Re: [arch-general] IPTables DDoS

2010-07-20 Thread vlad
Hello, On Mon, Jul 19, 2010 at 10:43:45PM +0530, Nilesh Govindarajan wrote: > Hi, > Can someone tell me how to use IPTables to prevent DDoS attacks? > I'm sure IPTables has the relevant modules (limit, recent I think) > after reading some docs, but still in doubt about its implementation. The rece

Re: [arch-general] IPTables DDoS

2010-07-19 Thread Nilesh Govindarajan
On Tue, Jul 20, 2010 at 12:01 AM, C Anthony Risinger wrote: > On Mon, Jul 19, 2010 at 1:07 PM, Nilesh Govindarajan wrote: >> On Mon, Jul 19, 2010 at 11:14 PM, Heiko Baums wrote: >>> Am Mon, 19 Jul 2010 22:43:45 +0530 >>> schrieb Nilesh Govindarajan : >>> Hi, Can someone tell me how to

Re: [arch-general] IPTables DDoS

2010-07-19 Thread C Anthony Risinger
On Mon, Jul 19, 2010 at 1:07 PM, Nilesh Govindarajan wrote: > On Mon, Jul 19, 2010 at 11:14 PM, Heiko Baums wrote: >> Am Mon, 19 Jul 2010 22:43:45 +0530 >> schrieb Nilesh Govindarajan : >> >>> Hi, >>> Can someone tell me how to use IPTables to prevent DDoS attacks? >>> I'm sure IPTables has the r

Re: [arch-general] IPTables DDoS

2010-07-19 Thread Heiko Baums
Am Mon, 19 Jul 2010 23:37:01 +0530 schrieb Nilesh Govindarajan : > Thanks a lot man. But I have a doubt (may sound quite weird, but I > really don't know about it). > Suppose I set this- > iptables -I INPUT -m limit --limit 1/min --limit-burst 5 -j ACCEPT > will this affect HTTP connections? This

Re: [arch-general] IPTables DDoS

2010-07-19 Thread Nilesh Govindarajan
On Mon, Jul 19, 2010 at 11:14 PM, Heiko Baums wrote: > Am Mon, 19 Jul 2010 22:43:45 +0530 > schrieb Nilesh Govindarajan : > >> Hi, >> Can someone tell me how to use IPTables to prevent DDoS attacks? >> I'm sure IPTables has the relevant modules (limit, recent I think) >> after reading some docs, b

Re: [arch-general] IPTables DDoS

2010-07-19 Thread Heiko Baums
Am Mon, 19 Jul 2010 22:43:45 +0530 schrieb Nilesh Govindarajan : > Hi, > Can someone tell me how to use IPTables to prevent DDoS attacks? > I'm sure IPTables has the relevant modules (limit, recent I think) > after reading some docs, but still in doubt about its implementation. There's the --limi

Re: [arch-general] IPTables DDoS

2010-07-19 Thread Nilesh Govindarajan
On Mon, Jul 19, 2010 at 10:50 PM, C Anthony Risinger wrote: > On Mon, Jul 19, 2010 at 12:13 PM, Nilesh Govindarajan > wrote: >> Hi, >> Can someone tell me how to use IPTables to prevent DDoS attacks? >> I'm sure IPTables has the relevant modules (limit, recent I think) >> after reading some docs

Re: [arch-general] IPTables DDoS

2010-07-19 Thread C Anthony Risinger
On Mon, Jul 19, 2010 at 12:13 PM, Nilesh Govindarajan wrote: > Hi, > Can someone tell me how to use IPTables to prevent DDoS attacks? > I'm sure IPTables has the relevant modules (limit, recent I think) > after reading some docs, but still in doubt about its implementation. DDoS? do you mean jus