M
M
Maxim2013-12-11 10:15:44
iptables
Maxim, 2013-12-11 10:15:44

What does this line do in iptables?

due to the small or rather complete lack of experience in iptables, the question arose:
what exactly does the line

Chain INPUT (policy ACCEPT 3294K packets, 1357M bytes)
 pkts bytes target     prot opt in     out     source               destination
57251   57M DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 STRING match "POST /" ALGO name bm TO 65535

in iptables.
It is clear that it blocks Post requests for /, but what the rest of the parameters interests me most of all.
in particular, ALGO name bm TO 65535 is interested in what kind of numbers and what they influence.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
C
Chromium58, 2013-12-11
@Chromium58

ALGO name bm - it means that the Boyer-Moore
algorithm is used TO 65535 - the substring is searched in the first 65535 bytes
PS I didn't know this myself, I found it in 5 minutes of searching. A question for you, are you fundamentally not looking for information on your own?

M
Maxim, 2013-12-11
@iru

I honestly searched, just the panic has already begun ......

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question