Advertisement
Guest User

Untitled

a guest
Aug 20th, 2019
90
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.67 KB | None | 0 0
  1. iptables -A INPUT -p tcp --dport 22 -m state --state NEW
  2. -m hashlimit --hashlimit-name SSH --hashlimit-above 5/min
  3. --hashlimit-mode srcip -j REJECT
  4. iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT
  5.  
  6. iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent
  7. --rcheck --seconds 60 --hitcount 5 --name SSH --rsource -j REJECT
  8. iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW
  9. -m recent --set --name SSH --rsource -j ACCEPT
  10.  
  11. Is there any difference in how these two will behave?
  12.  
  13. With an emphasis on performance, which one is preferable?
  14.  
  15. Is there a significant downside to using both modules?
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement