View previous topic :: View next topic |
Author |
Message |
seVes n00b

Joined: 06 Jan 2011 Posts: 54 Location: Germany
|
Posted: Fri Jan 15, 2016 8:03 pm Post subject: nftables meets SYNPROXY? |
|
|
Hey!
I switched my server to using nftables and converted nearly all iptables-rules into nftables.
At least, the protection using SYNPROXY is missing.
Is nftables able to use SYNPROXY or not?
If yes, how? _________________ Alex / seVes |
|
Back to top |
|
 |
massimo Veteran


Joined: 22 Jun 2003 Posts: 1226
|
|
Back to top |
|
 |
seVes n00b

Joined: 06 Jan 2011 Posts: 54 Location: Germany
|
Posted: Sat Jan 16, 2016 6:55 pm Post subject: |
|
|
Thanks massimo!
I already found that page, but that doesn't help me that much.
Can you give me an example-line for the nftables?
iptables example:
Code: | iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460
|
_________________ Alex / seVes |
|
Back to top |
|
 |
|