TCPSYN碎片的防御

當你知道是哪一臺機器受到攻擊： accesslist 103 deny tcp any host 10.0.0.1 established ! Let established sessions run fine accesslist 103 permit tcp any host 10.0.0.1 ! We are just going to rate limit the initial tcp SYN packet, ! as the othe

access−list 103 deny tcp any host 10.0.0.1 established

!−− Let established sessions run fine

access−list 103 permit tcp any host 10.0.0.1

!−− We are just going to rate limit the initial tcp SYN packet, !−− as the other packets in interface

rate−limit input access−group 103 8000 8000 8000 conform−action transmit exceed−action drop

當你不知道哪一臺機器或者幾臺受到攻擊

access−list 104 deny tcp any any established

!−− Let established sessions run fine

access−list 104 permit tcp any any

!−− We are just going to rate limit the initial tcp SYN packet, as the other packets !−− in interface

rate−limit input access−group 104 64000 8000 8000 conform−action transmit

exceed−action drop

聲明：本網(wǎng)頁內容旨在傳播知識，若有侵權等問題請及時與本網(wǎng)聯(lián)系，我們將在第一時間刪除處理。TEL:177 7030 7066 E-MAIL:11247931@qq.com