Jan Rafaj 2b2b6246f0 pknock: Make non-zero time mandatory for TCP mode ...

This avoids DDoS on the first-in-sequence TCP knockport, which would
otherwise fill up the peer table permanently - especially if the user
does not specify --autoclose - and would thus cause permanent pknock
DoS.

Signed-off-by: Jan Rafaj <jr+netfilter-devel@cedric.unob.cz>

2009-10-12 01:24:41 +02:00

..

Kbuild

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

libxt_pknock.c

pknock: Make non-zero time mandatory for TCP mode

2009-10-12 01:24:41 +02:00

Makefile.am

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

Mbuild

pknock: move into separate directory

2009-10-09 17:50:05 +02:00

xt_pknock.c

pknock: Make non-zero time mandatory for TCP mode

2009-10-12 01:24:41 +02:00

xt_pknock.h

pknock: implement automatic closing

2009-10-12 01:13:00 +02:00

xt_pknock.Kconfig

pknock: add Kconfig file

2009-10-09 18:11:49 +02:00