Skip to content

Instantly share code, notes, and snippets.

@vdw

vdw/gist:09efee4f264bb2630345

Last active January 31, 2023 08:55
Show Gist options
  • Star 26 You must be signed in to star a gist
  • Fork 10 You must be signed in to fork a gist
  • Save vdw/09efee4f264bb2630345 to your computer and use it in GitHub Desktop.
Save vdw/09efee4f264bb2630345 to your computer and use it in GitHub Desktop.
Download ZIP
Kill tcp connection with tcpkill on CentOS
Raw
gistfile1.md

Install tcpkill
yum -y install dsniff --enablerepo=epel

View connections
netstat -tnpa | grep ESTABLISHED.*sshd.

Block with ip tables
iptables -A INPUT -s IP-ADDRESS -j DROP

Kill connection
tcpkill -i eth0 -9 port 50185

Block brute forcing - iptables rules

iptables -L -n

iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --set
iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent  --update --seconds 600 --hitcount 3 -j DROP

iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name ssh --rsource
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent ! --rcheck --seconds 600 --hitcount 3 --name ssh --rsource -j ACCEPT

service iptables save
service iptables restart
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment