I have someone flooding me with random packets on random ports that are closed.
My server is responding to this with tcp-reset packets I think which is chewing up the outbound bandwidth too.
How do I use iptables to block tcp-reset packets?
If you only have the single box and no other machines in your network are making connections to it, you could get away with blocking all
This is not very polite to legitimate connections if you happen to be down and it can cause unneeded timeouts in established connections that need to use a
If your normal usage of this box relies on
Are these packets truly random or is there something they all have in common?
If you add a
Even if you don't find a pattern, since there is definitely a pattern based on "too many reset packets" you can create a fail2ban rule that will add a