1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
| -
!
-
!
-
!
-
!
| iptables -N drop_invalid_flag
iptables -A drop_invalid_flag -j LOG --log-prefix "INVALID_FLAS: " -m limit --limit 1/s --limit-burst 10
iptables -A drop_invalid_flag -j DROP
iptables -N drop_flag
iptables -A drop_flag -p tcp --tcp-flags ACK,FIN FIN -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ACK,PSH PSH -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ACK,URG URG -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags FIN,RST FIN,RST -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags SYN,FIN SYN,FIN -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags SYN,RST SYN,RST -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ALL ALL -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ALL NONE -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ALL FIN,PSH,URG -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j drop_invalid_flag
iptables -A drop_flag -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j drop_invalid_flag
iptables -A INPUT -p tcp -j drop_flag
iptables -A OUTPUT -p tcp -j drop_flag
|