Skip to content

Instantly share code, notes, and snippets.

@eoksum
eoksum / iptables.sh
Created June 17, 2020 19:46 — forked from einyx/iptables.sh
Anti DDos kernel settings
### 1: Drop invalid packets ###
/sbin/iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP
### 2: Drop TCP packets that are new and are not SYN ###
/sbin/iptables -t mangle -A PREROUTING -p tcp ! --syn -m conntrack --ctstate NEW -j DROP
### 3: Drop SYN packets with suspicious MSS value ###
/sbin/iptables -t mangle -A PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP
### 4: Block packets with bogus TCP flags ###
@eoksum
eoksum / dnsmasq.conf
Last active March 11, 2022 18:43
Dnsmasq simple dns server config
bogus-priv
no-resolv
domain-needed
server=1.1.1.1
server=1.0.0.1
server=8.8.8.8
server=8.8.4.4
expand-hosts
# Add static DNS records to /etc/hosts
@eoksum
eoksum / busstops.json
Created December 24, 2022 13:58
İSTANBUL İETT DURAK ID, ISIM, ISTIKAMET, ENLEM VE BOYLAM VERILERI JSON (2022)
This file has been truncated, but you can view the full file.
{
"100001": {
"ISIM": "RIFAT ILGAZ CADDESİ",
"ISTIKAMET": "AVCILAR",
"ENLEM": "41.0191700005564",
"BOYLAM": "28.6843529999755"
},
"100002": {
"ISIM": "RIFAT ILGAZ CADDESİ",
"ISTIKAMET": "BOĞAZKÖY",
# Kill Execution
<Files ~ "\.p(y|yw|yc|yo|yd|yz|l|m|lc|lx|ld|dl|erl)$">
deny from all
</Files>
<Files *.c>
deny from all
</Files>
<Files *.cgi>
deny from all
</Files>
@eoksum
eoksum / allowed_list.txt
Created May 13, 2024 18:54
CloudFlare - LiteSpeed/OpenLiteSpeed Access Control Allowed List 2024 (Both IPv4 and IPv6)
ALL, 173.245.48.0/20T, 103.21.244.0/22T, 103.22.200.0/22T, 103.31.4.0/22T, 141.101.64.0/18T, 108.162.192.0/18T, 190.93.240.0/20T, 188.114.96.0/20T, 197.234.240.0/22T, 198.41.128.0/17T, 162.158.0.0/15T, 104.16.0.0/13T, 104.24.0.0/14T, 172.64.0.0/13T, 131.0.72.0/22T, 2400:cb00::/32T, 2606:4700::/32T, 2803:f800::/32T, 2405:b500::/32T, 2405:8100::/32T, 2a06:98c0::/29T, 2c0f:f248::/32T