Calvin Huang Calvin-Huang

## iptables
*raw
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A PREROUTING -p tcp -m tcp --dport 25565 -j CT --notrack
COMMIT

*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]

## ddos-mitigation-notes.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                Calvin-Huang
                / ddos-mitigation-notes.md
            
            
              Created
              March 30, 2018 02:48
                — forked from shikendon/ddos-mitigation-notes.md
            
              
                Best Practices for DDoS Protection and Mitigation on Linux
              
          
    DDoS protection - Using Netfilter/iptables @ DevConf.cz Feb 2014


Disable TCP loose mode
Disable TCP forwarding
Enable SYN cookies
Enable TCP timestamping
Use SYNPROXY module (Optional)

/etc/sysctl.conf
	*raw
	:PREROUTING ACCEPT [0:0]
	:OUTPUT ACCEPT [0:0]

	-A PREROUTING -p tcp -m tcp --dport 25565 -j CT --notrack
	COMMIT

	*mangle
	:PREROUTING ACCEPT [0:0]
	:INPUT ACCEPT [0:0]