iptables.up.rules

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:nominal-syn - [0:0]
:syn-flood - [0:0]
:non-syn - [0:0]
-A FORWARD -p tcp --syn -m hashlimit --hashlimit-above 50/sec --hashlimit-burst 100 --hashlimit-htable-expire 300000 --hashlimit-mode srcip --hashlimit-name synstop -j syn-flood
-A FORWARD -p tcp --syn -j nominal-syn
-A FORWARD -j non-syn
-A syn-flood -m recent --name blacklist --set
-A syn-flood -m limit --limit 3/minute --limit-burst 20 -j LOG --log-level 4 --log-prefix "SYN Flood: "
-A syn-flood -j DROP
-A nominal-syn -j ACCEPT
-A non-syn -j ACCEPT
-I INPUT -p TCP -m state --state NEW -m limit --limit 30/minute --limit-burst 5 -j ACCEPT
-I INPUT -p udp -m state --state NEW -m limit --limit 30/minute --limit-burst 5 -j ACCEPT

COMMIT