#\u7f29\u77edSYN- Timeout\u65f6\u95f4\uff1a
iptables -A FORWARD -p tcp –syn -m limit –limit 1\/s -j ACCEPT
iptables -A INPUT -i eth0 -m limit –limit 1\/sec –limit-burst 5 -j ACCEPT<\/p>\n
#\u6bcf\u79d2 \u6700\u591a3\u4e2a syn \u5c01\u5305 \u8fdb\u5165 \u8868\u8fbe\u4e3a \uff1a
iptables -N syn-flood
iptables -A INPUT -p tcp –syn -j syn-flood
iptables -A syn-flood -p tcp –syn -m limit –limit 1\/s –limit-burst 3 -j RETURN
iptables -A syn-flood -j REJECT<\/p>\n
#\u8bbe\u7f6esyncookies\uff1a
sysctl -w net.ipv4.tcp_syncookies=1
sysctl -w net.ipv4.tcp_max_syn_backlog=3072
sysctl -w net.ipv4.tcp_synack_retries=0
sysctl -w net.ipv4.tcp_syn_retries=0
sysctl -w net.ipv4.conf.all.send_redirects=0
sysctl -w net.ipv4.conf.all.accept_redirects=0
sysctl -w net.ipv4.conf.all.forwarding=0
sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1<\/p>\n
#\u9632\u6b62PING\uff1a
sysctl -w net.ipv4.icmp_echo_ignore_all=1<\/p>\n
#\u62e6\u622a\u5177\u4f53IP\u8303\u56f4\uff1a
iptables -A INPUT -s 10.0.0.0\/8 -i eth0 -j Drop <\/p>\n","protected":false},"excerpt":{"rendered":"
#\u7f29\u77edSYN- Timeout\u65f6\u95f4\uff1aiptables -A FORWARD -p tcp –syn<\/p>\n