Hot answers tagged

4

Below are the meanings of those arguments in the above iptables rules. --syn This is actually short for --tcp-flags SYN,RST,ACK,FIN SYN and says that for the packets being examined by this iptables rule, TCP flags SYN, RST, ACK and FIN should be checked. Only packets with the TCP flag SYN set should be matched. --connlimit-above 20 This is actually ...


2

Public vs private doesn't really matter here, you can use either one. However, I think you'll find that it's very tricky to implement what you're looking for without placing your existing servers into a dedicated subnet, private or public, for which the new server/FW acts as a gateway, because that's the most natural way to get traffic to flow systematically ...


1

If you are referring to HTTP protocol and remote web-clients, like browsers, then, to display a warning page to a set of such clients, basing on their IP address information, you can use mod_rewrite to rewrite the DocumentRoot of a given vhost (the one that you want to protect) to some path, say /blacklisted.html. For example, consider the following ...



Only top voted, non community-wiki answers of a minimum length are eligible