I was given this set of iptables rule that supposedly works.
iptables -A FORWARD -p tcp --syn --dport 5213 -m limit --limit 120/m --limit-burst 1 -j ACCEPT iptables -A FORWARD -p tcp --syn --dport 5213 -j DROP
I understand the part about limiting the number of TCP-SYNs that are accepted. What I'm confused about is how the
FORWARD chain was used.
I usually see rules under the
FORWARD chain specifying the source/destination IP address, but the rules above only specified the destination port.
Does this mean that the destination is still the system that received this message? If so, what would be the difference if I used the
INPUT chain instead?