mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-12 20:16:49 +02:00
firewall: Implement generating SYNPROXY rules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
@@ -407,6 +407,10 @@ iptables_init() {
|
||||
iptables -t nat -N REDNAT
|
||||
iptables -t nat -A POSTROUTING -j REDNAT
|
||||
|
||||
# SYN Flood Protection
|
||||
iptables -t raw -N SYN_FLOOD_PROTECT
|
||||
iptables -t raw -A PREROUTING -p tcp --syn -j SYN_FLOOD_PROTECT
|
||||
|
||||
# Populate IPsec chains
|
||||
/usr/lib/firewall/ipsec-policy
|
||||
|
||||
|
||||
Reference in New Issue
Block a user