From 538973585582de32a26a3003bb9a97b0c882e589 Mon Sep 17 00:00:00 2001 From: bbruns Date: Sun, 16 Feb 2014 20:05:33 +0000 Subject: [PATCH] New NTP DDoS target hack --- include/functions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/functions b/include/functions index d8323f6..2ae4c55 100755 --- a/include/functions +++ b/include/functions @@ -163,7 +163,7 @@ function apply_ipv4_hack { # Rate limit NTP DDOS UDP traffic using rules provided on the nanog list by # pashdown@xmission.com $IPTABLES -N NTP - $IPTABLES -I 1 BLACKHOLE -m recent --set --name ntpv4blackhole --rsource + $IPTABLES -I BLACKHOLE 1 -m recent --set --name ntpv4blackhole --rsource $IPTABLES -A NTP -m recent --update --seconds 5 --hitcount 20 --name \ ntpv4 --rsource -j BLACKHOLE $IPTABLES -A NTP -m recent --update --seconds 5 --hitcount 2 --name \