Portál AbcLinuxu, 11. května 2025 07:23
tcp_flags
Specifies the flags that must be set in the TCP header when using proto tcp. Flags are specified as flags check/mask.
For example: flags S/SA - this instructs PF to only look at the S and A (SYN and ACK) flags and to match if only the SYN flag is "on".
state
Specifies whether state information is kept on packets matching this rule.
* keep state - works with TCP, UDP, and ICMP.
* modulate state - works only with TCP. PF will
generate strong Initial Sequence Numbers (ISNs) for packets
matching this rule.
* synproxy state - proxies incoming TCP connectionsto help protect servers from spoofed TCP SYN floods.
This option includes the functionality of keep state and modulate state.
InServicesTCP = "{ smtp, pop3, domain, http, https, imap, 799, 1234, 1194 }"
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.