All pastes #81108 Raw Edit

Mine

public text v1 · immutable
·published 2006-07-07 04:06 UTC
rendered paste body
iptables -A INPUT -p tcp --tcp-flags SYN,RST,ACK NONE -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS1 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT   -p tcp --tcp-flags SYN,RST     SYN,RST -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS2 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A OUTPUT  -p tcp --tcp-flags SYN,RST,ACK NONE    -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS3 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A OUTPUT  -p tcp --tcp-flags SYN,RST     SYN,RST -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS4 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT   -p tcp --tcp-flags SYN,RST,ACK NONE    -j DROP
iptables -A INPUT   -p tcp --tcp-flags SYN,RST     SYN,RST -j DROP
iptables -A OUTPUT  -p tcp --tcp-flags SYN,RST,ACK NONE    -j DROP
iptables -A OUTPUT  -p tcp --tcp-flags SYN,RST     SYN,RST -j DROP

iptables -A INPUT -p tcp --tcp-flags ALL NONE              -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS5 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags ALL ALL               -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS6 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST       -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS7 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN       -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS8 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags FIN,SYN FIN,SYN       -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS9 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST       -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS10 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags FIN,RST FIN,RST       -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS11 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags ACK,FIN FIN           -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS12 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags ACK,URG URG           -j LOG --log-level 7 \
--log-prefix "BAD-FLAGS13 : " --log-tcp-options --log-tcp-sequence --log-ip-options

iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE        -j LOG \
--log-level 7 --log-prefix "BAD-FLAGS14 : " --log-tcp-options --log-tcp-sequence \
--log-ip-options

iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -j LOG \
--log-level 7 --log-prefix "BAD-FLAGS15 : " --log-tcp-options --log-tcp-sequence \
--log-ip-options

iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE        -j LOG \
--log-level 7 --log-prefix "BAD-FLAGS16 : " --log-tcp-options --log-tcp-sequence \
--log-ip-options

iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST                     -j LOG \
--log-level 7 --log-prefix "BAD-FLAGS17 : " --log-tcp-options --log-tcp-sequence \
--log-ip-options

iptables -A INPUT -p tcp --tcp-flags ALL NONE              -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL ALL               -j DROP
iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST       -j DROP
iptables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN       -j DROP
iptables -A INPUT -p tcp --tcp-flags FIN,SYN FIN,SYN       -j DROP
iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST       -j DROP
iptables -A INPUT -p tcp --tcp-flags FIN,RST FIN,RST       -j DROP
iptables -A INPUT -p tcp --tcp-flags ACK,FIN FIN           -j DROP
iptables -A INPUT -p tcp --tcp-flags ACK,URG URG           -j DROP
iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE        -j DROP
iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -j DROP
iptables -A INPUT -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE        -j DROP
iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST                     -j DROP