Jan Rafaj 08f6a82bdc pknock: avoid fillup of peer table during DDoS ...

In TCP --strict mode, forget the peer which sent the wrong knock in a
sequence, rather than resetting its status to ST_INIT. This avoids
filling up the peer table (which would lead to pknock DoS) in case of
a DDoS attack performed by a set of port-scanning malicious hosts.

2009-10-11 01:48:20 +02:00

..

Kbuild

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

libxt_pknock.c

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

Makefile.am

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

Mbuild

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

xt_pknock.c

pknock: avoid fillup of peer table during DDoS

2009-10-11 01:48:20 +02:00

xt_pknock.h

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

xt_pknock.Kconfig

pknock: add Kconfig file

2009-10-09 18:11:49 +02:00