Tag Info

New answers tagged

3

Try with: firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT_direct 0 -p tcp --dport 22 -m state --state NEW -m recent --set firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT_direct 1 -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 30 --hitcount 4 -j REJECT --reject-with tcp-reset firewall-cmd --reload A full ...


0

You can use a lightweight IPS likefail2ban. It works with firewalld using an action plugin (/etc/fail2ban/action.d/firewallcmd-ipset.conf) that adds banned IPs to an ipset using direct rules. The default banaction (/etc/fail2ban/jail.conf) is ipables-multiport, but you can create a local.conf for a custom [sshd-ddos] jail using a different banaction. ...


2

I was just trying to do this myself, was having no luck, and decided to resort to my google-fu. The top result for me when looking for multiple levels of rate limiting was this, and I got really excited. Then I saw it had no answers and initially fell into an existential pit of despair. After digging myself out, I kept hacking, and by some stroke of luck, I ...



Top 50 recent answers are included