U
U
Urukhayy2015-07-24 16:38:16
System administration
Urukhayy, 2015-07-24 16:38:16

Why are packages arriving at the game service not being registered with "-m recent --set"?

The task is to sweep away the falsified IPs that are trying to flood the game server with their multiple and one-time connections. The supposed solution was to let the IP address from the second time to the server. The following is an iptables setup that writes to the IP database, then when the IP "knocks" more than 3 times it lets it go. But the problem is that when connecting to the game server, --set does not react at all and does not record, but if it concerns another service on the same VDS, for example, a site, then the setting works.

iptables  -A INPUT -p all -m recent --set --name base --rsource
iptables -A INPUT -p all -m recent ! --rcheck --seconds 15 --hitcount 3 --name base --rsource -j DROP

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question