IPTables: Catene - democritos

proc filesystem●disattivazione IP forwardingecho "0" > /proc/sys/net/ipv4/ip_forward●protezione da SYN flood (DoS, DDoS)echo "1" > /proc/sys/net/ipv4/tcp_syncookies●logging e protezione da spoofing, redirect, broadcast (DDoS, smurf)echo "1" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responsesecho "1" > /proc/sys/net/ipv4/icmp_echo_ignore_allecho "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcastsecho "100" > /proc/sys/net/ipv4/icmp_ratelimitecho "0" > /proc/sys/net/ipv4/conf/all/accept_redirectsecho "0" > /proc/sys/net/ipv4/conf/all/accept_source_routeecho "0" > /proc/sys/net/ipv4/conf/all/secure_redirectsecho "1" > /proc/sys/net/ipv4/conf/all/rp_filterecho "1" > /proc/sys/net/ipv4/conf/all/log_martiansPer ulteriori informazioni:/usr/src/linux/Documentation/networking/ip-sysctl.txthttp://cr.yp.to/syncookies.htmlhttp://securityfocus.com/infocus/171132